Get Success in Passing Your

Transcription

1 Get Success in Passing Your Certification at first attempt!

2 Vendor: Microsoft Exam Code: Exam Name: Windows Server 2008,Enterprise Administrator Version: Demo

3 Case Study: 18 Consolidated Messenger General Background Consolidated Messenger is an international company with multiple regional offices, branch offices, and data centers. The company has an existing Microsoft Software Assurance for Volume Licensing subscription. Infrastructure Background The offices and data centers are described in the following table. All offices and data centers are connected by a private routed network. The environment includes a mix of physical servers and virtual machines (VMs). All servers are backed up by using Microsoft System Center Data Protection Manager (DPM). The DPM server in each data center has a replica partner in the other data center.

4 Branch Offices The branch offices do not have secure locations in which to install network equipment or servers. The six physical servers in the Montreal branch office are described in the following table. Data Centers The data centers contain Hyper-V failover clusters, as described in the following table. The data centers share a Hyper-V geocluster with 16 nodes. Each site has 8 nodes. Replicated SAN storage and a file share witness for the geocluster are located in the Ottawa regional office. Each data center contains direct-attached storage (DAS) and multiple storage area network (SAN) systems. Some SAN storage is replicated across the data centers. The company has a single DHCP server that is located in the Toronto data center. All network switches and routers are configured with DHCP Relay to the Toronto DHCP server. The DHCP server is a physical server with DAS. Domain Background The company network contains an Active Directory Domain Services (AD DS) domain. Each location is represented by an Active Directory site. All domain controllers run Windows Server The domain controllers are described in the following table.

5 The Root.local domain only contains a limited number of administrative accounts. All other user accounts are located in the User.Root.local domain. Security Background The Ethernet switches and Wireless Access Points (WAPs) are protected with 802. lx port security using Windows username and password Protected Extensible Authentication Protocol (PEAP). Client computers are authenticated by using a Network Policy Server (NPS). A health check is performed before client computers are allowed onto the corporate network. Application Background Applications are deployed to client computers and Remote Desktop servers by using Microsoft Application Virtualization (App-V). Each data center and branch office has an App-V Streaming Server. Several applications utilize Windows Server Failover Clustering within the Hyper-V environment. All failover cluster servers run Windows Server 2008 R2. A Customer Relationship Management (CRM) application is installed on a 32-bit virtual machine (VM) in the Toronto data center that is not compatible with Windows on Windows (WoW). Users will be granted remote access to the CRM application. Business requirements The company is planning to migrate its existing Microsoft Exchange Server environment to Microsoft Office 365 with rich co-existence. The company is planning to deploy 500 new retail locations. The retail locations must use a new Active Directory infrastructure. Each retail location will have access to a set of services. These services will be accessible only from a new perimeter network in both the Toronto and Vancouver data centers. Each retail location will have a private network connection to the perimeter network. The retail location client computers will be hardware-based thin clients that run Windows 7 Enterprise. The retail locations will use only network printers managed by printer location policies. A consulting company will provide on-site consultants in multiple regional offices, branch offices, and retail locations. The consulting company will supply the consultants with tablet computers. The consultants will require access to the Internet and to some server resources. Technical Requirements You have the following general requirements:

6 Each office must have at least one domain controller. All current and future branch office domain controllers must replicate AD information only with domain controllers located in the data centers. Client computers and servers must always obtain the same IP address in the event of a DHCP service failure. Remote access to the CRM application must be enabled through a CustomerService.msi file distributed to users. Applications must be streamed from a local Streaming Server if one is available. You have the following security requirements: Ensure that users in the retail locations cannot see or access any corporate domain information or other corporate services. Permit user accounts on each branch office and retail location server only for users who work in that location. Enable single sign-on (SSO) using the existing Active Directory user accounts for all external applications. Consultant computers must be issued exemption certificates from a dedicated Active Directory Certificate Services (AD CS) server. Ensure that all non-corporate computers pass a Health Check before being allowed on the network, other than consultant computers that have passed a manual system audit. Minimize the attack surface an all servers. Question: 1 You need to recommend the editions of Windows Server 2008 R2 that meet the requirements for the new AD CS server. Which editions should you recommend? (Each correct answer presents a complete solution. Choose three.) A. a Server Core installation of Windows Server 2008 R2 Datacenter B. Windows Server 2008 R2 Enterprise C. Windows Server 2008 R2 Web Server D. Windows Server 2008 R2 Standard E. a Server Core installation of Windows Server 2008 R2 Standard F. a Server Core installation of Windows Server 2008 R2 Web Server G. Windows Server 2008 R2 Datacenter H. a Server Core installation of Windows Server 2008 R2 Enterprise Answer: B, D, G Question: 2 You need to add the necessary technologies to the environment to prepare Active Directory for Office 365. Which technologies should you recommend? (Each correct answer presents part of the solution. Choose two.)

7 A. Active Directory Web Services B. Active Directory Federation Services C. Microsoft Forefront Unified Access Gateway (UAG) D. Microsoft Online Directory Synchronization Tool E. Microsoft Forefront Identity Manager Answer: B, D Question: 3 You need to configure the replication topology for the branch offices. What should you recommend? (Choose all that apply.) A. Create site links between the branch office domain controllers with a cost of 50. B. Delete the automatically created site links for the branch office domain controllers. C. Create site links between the branch office domain controllers and the data center domain controllers with a cost of 50. D. Disable the Knowledge Consistency Checker (KCC). E. Create site links between the data center domain controllers with a cost of 25. Answer: B, C Question: 4 You need to ensure that the CRM application server is a highly available virtual machine (HAVM) that will fail between data centers. What should you recommend? A. Place the HAVM on local storage and use Hyper-V Replica to replicate the VM to the other site. B. Place the HAVM on a logical unit number (LUN) dedicated to a single VM. C. Place the HAVM on a direct-attached storage (DAS) disk array. D. Place the HAVM on a Cluster Shared Volume (CSV) with other HAVMs. Answer: B Question: 5 You need to ensure that DHCP service is highly available between the two data centers. What should you recommend? (Each correct answer presents part of the solution. Choose three.)

8 A. Move the DHCP database to the SAN storage. B. Migrate the DHCP service to a highly available virtual machine (HAVM) in the Toronto data center. C. Configure Network Load Balancing between the two DHCP servers, D. Perform a physical-to-virtual (P2V) migration of the DHCP server in Toronto. E. Configure a failover cluster that contains the two DHCP servers. F. Use System Center Data Protection Manager (DPM) to back up the DHCP database and replicate it to the Vancouver DPM server. G. Migrate the DHCP service to a highly available virtual machine (HAVM) in the Vancouver data center. H. Install a DHCP server in the Vancouver data center. Answer: A, E, H

9