QUESTION 151
A company has 50 servers that run Windows Server 2008 R2 Enterprise or Windows Server 2003 Enterprise. You plan to deploy a large-scale wireless network. The wireless network will include 300 wireless access points (WAPs). The WAPs will use Remote Authentication Dial-In User Service (RADIUS) to authenticate devices for network access. All passwords and shared secrets used for device authentication must be changed every 14 days. You need to enable centralized management of the RADIUS infrastructure across the WAPs. What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
A. Deploy a Network Policy Server (NPS) and define individual RADIUS client settings with IEEE 802.IX
authentication for each WAP.
B. Deploy a Host Credential Authorization Protocol (HCAP) server and configure it as a RADIUS proxy.
C. Deploy a Network Policy Server (NPS).
Create an XML file named ias.xml that defines access point settings.
Then run the netsh nps import filename = “ias.xml” command.
D. Deploy a Network Policy Server (NPS) and define an NPS template.
Configure the RADIUS client settings for each client based on the template.
Answer: D
QUESTION 152
A company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. The company plans to add a large number of members to the Account Operators group. You create a new organizational unit (OU), move the Account Operators group to the new OU, and delegate control of the OU to a server operator. The server operator is unable make changes to the Account Operators group. You need to ensure that the server operator can manage the Account Operators group. What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
A. Set the dsHeuristic flag to include the Account Operators group in the AdminSDHolder protection.
B. Make the server operator a Domain Administrator.
C. Manually alter the access control lists (ACLs) on the Account Operators group to allow the server operator
control.
D. Set the dsHeuristic flag to exclude the Account Operators group from the AdminSDHolder protection.
Answer: C
QUESTION 153
Drag and Drop Questions
Tailspin Toys is merging with Wingtip Toys. Tailspin Toys uses the tailspintoys.com domain name. Wingtip Toys uses the wingtiptoys.com domain name. The companies’ networks are connected by a point-to-point WAN connection. Each company has an existing IT infrastructure that includes the servers described in the following table.
The DNS servers in the perimeter network are standalone servers. None of the DNS servers in the perimeter network can initiate communication with the DNS servers in the internal network. The DNS servers in the internal network can communicate with the DNS servers in the perimeter network. You are designing a name resolution strategy to meet the following requirements:
– Ensure that Tailspin Toys employees can resolve internal resources in the wingtiptoys.com domain from the Tailspin Toys LAN,
– Ensure that Wingtip Toys employees can resolve internal resources in the tailspintoys.com domain from the Wingtip Toys LAN.
– Continue to use the Wingtip Toys DNS servers to resolve all wingtiptoys.com queries.
– Reduce the administrative overhead of supporting name resolution during the merger.
You need to recommend a solution to meet the requirements.
What should you do?
To answer, drag the appropriate item or items to the correct location or locations in the answer area. (Use only items that apply.)
QUESTION 154
Drag and Drop Questions
A company has an Active Directory infrastructure that includes a large number of Group Policy objects (GPOs). The infrastructure includes a staging forest and a production forest. There is no trust relationship between the staging and production forests. All servers run Windows Server 200S R2 and share the same network infrastructure. You need to create a plan for deploying GPO changes from the staging forest to the production forest. Which actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Use only actions that apply.)
QUESTION 155
Drag and Drop Questions
A toy company has a single Active Directory forest that contains a single domain named wingtiptoys.com. All domain controllers run Windows Server 2008 R2. The company plans to split its divisions into two separate organizations, Wingtip Toys and Tailspin Toys. Wingtip Toys users and computers will remain in the current environment. Tailspin Toys users and computers will migrate to a new environment that includes a new Microsoft Exchange Server organization. You need to design a plan for preparing the new environment to support the new Tailspin Toys Exchange Server organization. Which actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Use only actions that apply.)
QUESTION 156
A company has an Active Directory Domain Services (AD DS) domain with multiple sites. All servers run Windows Server 2008 R2. The company has multiple server operators. The server operators are members of the following Active Directory security groups:
– Server Operators
– Backup Operators
The company has an application that adds attributes to Active Directory. A server operator attempts to install the application on a server. The installation fails. You need to ensure that the server operator can install the application. What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
A. Install Active Directory Lightweight Directory Services in the Active Directory partition of a new server.
B. Allow the server operator to use the default Administrator account to make the changes.
C. Make the server operator a temporary member of the Schema Admins group.
D. Make the server operator a temporary member of the Enterprise Administrators group.
E. Make the server operator a temporary member of the Domain Administrators group.
Answer: C
QUESTION 157
Drag and Drop Questions
A company has an Active Directory Domain Services (AD DS) forest. The forest has a root domain named contoso.com and a child domain named corp.contoso.com. All domain controllers run Windows Server 2003. The forest and domain functional levels are Windows Server 2003. You are planning to migrate only the corp.contoso.com domain to Windows Server 2008 R2 and utilize read- only domain controllers (RODCs). You need to develop a plan to deploy the first RODC with the minimum number of changes to the AD DS environment. Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Use only actions that apply.)
QUESTION 158
Drag and Drop Questions
A company has a main office and a branch office. The company has an Active Directory Domain Services (AD DS) domain. Each office is assigned to an AD DS site. All servers in the domain run Windows Server 2008 R2. All client computers run Windows 7 Enterprise. Branch office users report delays in accessing data in the main office. You need to ensure that users can access data in a timely manner. Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Use only actions that apply.)
QUESTION 159
Drag and Drop Questions
Your company uses Windows Server Update Services (WSUS) to deploy Microsoft software updates to computers in the Madrid and Munich offices. You set a deadline for packages to be installed one week after they are approved. An update from Microsoft requires the user to consent to a new license agreement. You perform a successful manual installation of the update on client computers in the Munich office. The update fails to deploy on Madrid client computers when using WSUS. You need to ensure that the update is deployed to all client computers. Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area, and arrange them in the correct order. (Use only actions that apply.)
QUESTION 160
Fourth Coffee is merging with Fabrikam, Inc. Fourth Coffee has an Active Directory Domain Services (AD DS) domain with several child domains. Fabrikam has a UNIX-based environment that contains the Kerberos V5 protocol. Fabrikam users must have access to only resources in the root Fourth Coffee domain. Fourth Coffee users must not have access to the Fabrikam domain. You need to ensure that Fabrikam users can access the necessary Fourth Coffee resources. What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
A. Create a nontransitive two-way realm trust between Fourth Coffee and Fabrikam.
B. Create a transitive one-way realm trust from Fourth Coffee to Fabrikam.
C. Create a nontransitive one-way realm trust from Fourth Coffee to Fabrikam.
D. Create a transitive two-way realm trust between Fourth Coffee and Fabrikam.
Answer: C
If you want to pass Microsoft 70-647 successfully, donot missing to read latest lead2pass Microsoft 70-647 exam questions.
If you can master all lead2pass questions you will able to pass 100% guaranteed.