QUESTION 171
A company has an Active Directory forest that contains 250 domains. All domain controllers run Windows Server 2003. The forest functional level is Windows 2000. The domain functional level is Windows 2000 mixed. You are planning to migrate the domain controllers in only one domain to Windows Server 2008 R2. You need to ensure that Kerberos can be encrypted with Advanced Encryption Standard (AES) after the migration. What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
A. Raise the forest functional level to Windows Server 2003.
B. Raise the domain functional level to Windows Server 2008.
C. Raise the domain functional level to Windows Server 2003.
D. Raise the forest functional level to Windows Server 2008 R2.
Answer: C
QUESTION 172
Hotspot Questions
A company has multiple Active Directory forests. Each forest contains multiple domains. Departmental groups exist in each domain to provide access to shared folders. Group membership will rarely change. The number of users and groups has increased beyond a reasonable administrative capacity. You plan to minimize the number of groups. You must meet the following requirements:
– Support users from multiple domains across forests.
– Avoid group duplication.
– Support the ability to mail-enable the group.
– Minimize ongoing administrative effort.
You are designing a plan to meet the requirements. Which scope and type of group should you recommend? To answer, select the appropriate setting or settings in the dialog box.
Answer:
QUESTION 173
Contoso, Ltd. and Graphic Design Institute each have an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. A forest trust exists between Contoso and Graphic Design Institute. The Contoso domain includes multiple child domains, as shown in the following graphic. Users in the graphicdesigninstitute.com domain are experiencing slow logon times in the support.athens.contoso.com domain. You need to ensure that users in the graphicdesigninstitute.com domain can log on to the support.athens.contoso.com domain in a timely manner. What should you recommend? (More than one answer choice may achieve the goal.
Select the BEST answer.)
A. Create a two-way trust between support.athens.contoso.com and graphicdesigninstitute.com.
B. Create a shortcut trust between athens.contoso.com and graphicdesigninstitute.com.
C. Create a two-way trust between graphicdesigninstitute.com and athens.contoso.com.
D. Create a shortcut trust between graphicdesignmstitute.com and support.athens.contoso.com.
Answer: D
QUESTION 174
Wingtip Toys, is merging with Tailspin Toys. Each company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. A forest trust has been created between Wingtip Toys and Tailspin Toys. The Wingtip Toys domain contains an AD security group named Design. You need to ensure that only members of the Design security group can access specific file shares on the Tailspin Toys domain. What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
A. In the Tailspin Toys domain, enable forest-wide authentication.
Grant theDesign group access to the file shares.
B. In the Tailspin Toys domain, enable selective authentication.
Grant the Allowed to authenticate permission to the Design group.
Grant theDesign group access to the file shares.
C. In the Wingtip Toys domain, enable selective authentication.
Grant the Allowed to authenticate permission to the Design group.
Grant theDesign group access to the file shares.
D. In the Wingtip Toys domain, enable forest-wide authentication.
Grant theDesign group access to the file shares.
Answer: B
QUESTION 175
You work as an IT professional in an international company which is named Contoso. Your major job is to translate business goals into technology decisions and plan mid-range to long-term strategies. And you are experienced in network infrastructure, security policy and business continuity. In your company, you are responsible for infrastructure design and global configuration changes. There is one Active Directory forest in your network. One root domain and two child domains are contained in this forest. Windows Server 2008 is run by all domain controllers. The DNS Server service is run by all domain controllers that host Active Directory-integrated zones. You design a name resolution solution to support single-label names. You have to prepare the environment to support single-label name resolution across the entire forest. What action should you perform?
A. A resource records should be configured in the parent domain.
B. A GlobalNames zone should be deployed.
C. Stub zones in each child domain should be deployed.
D. Conditional forwarders should be configured in each child domain.
Answer: B
QUESTION 176
You work as an IT professional in an international company which is named Contoso. Your major job is to translate business goals into technology decisions and plan mid-range to long-term strategies. And you are experienced in network infrastructure, security policy and business continuity. In your company, you are responsible for infrastructure design and global configuration changes. There is one Active Directory domain in your network. Two servers named Server01 and Server02 are contained in the domain. Windows Server 2008 is run by all servers. Server01 can be accessed only from the internal network. Server02 can be accessed from the internal network and from the Internet. Microsoft SQL Server 2005 is run by Server01. All client computers are members of the domain and run Windows Vista Service Pack 1 (SP1). All client computers run an application that uses ActiveX Data Objects (ADO) to connect to Server01. Remote users need to be enabled to run the application from the Internet. Your solution must meet the following requirements:
– The SQL Server connection method used by the client application must not be changed.
– Remote users must be able to access the application through an HTTP or HTTPS connection.
What action should you perform on Server02?
A. The Network Policy and Access Services (NPAS) server role should be installed.
Secure Socket Tunneling
Protocol (SSTP) connections should be enabled.
B. The RPC should be installed over HTTP Proxy feature.
A proxy connection should be configured to Server01.
C. The Terminal Services Gateway (TS Gateway) role service should be installed.
An ADO connection should be configured to Server01.
D. The Web Server (IIS) server role should be installed.
A Web service that connects should be configured to SQL Server on Server01.
Answer: A
QUESTION 177
company purchases software exclusively through the Microsoft Software Assurance for Volume Licensing program. The company has rights to the Microsoft Desktop Optimization Pack (MDOP). All servers run Windows Server 2008 R2 and all client computers run Windows 7. Web developers must test website compatibility on their local computers against Windows Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, and Internet Explorer 9. You need to plan the deployment of the four versions of Internet Explorer to the local Computers with the minimum amount of administrative effort. What should you recommend? (More than one answer choice may achieve the goal. Select The BEST answer.)
A. Install Microsoft Application Visualization (App-V) 4.6 Service Pack 1 (SP1) on a server.
Sequence the installation of each version of Internet Explorer and deploy the sequenced files to the
App-V server
B. Configure four Remote Desktop Services servers. Install one version of Internet Explorer on each server.
Deploy each version of Internet Explorer by using RemoteApp
C. Configure four Remote Desktop Services servers. Install one version of Internet Explorer on each server.
Instruct developers to access the servers by using Remote Desktop Connection
D. Install Microsoft Enterprise Desktop Virtualization (MED-V) 2.0 on a server.
Create a virtual machine image for each version of Internet Explorer. Publish the Internet Explorer links
to each local computer.
E. Install Microsoft Virtual PC on each local computer.
Create a virtual machine image for each version of Internet Explorer. Deploy the images to each local computer
Answer: D
QUESTION 178
A corporate network includes a server that runs Windows Server 2008 R2. You plan to deploy a content management system on the server. You need to recommend a content management system that meets the following requirements:
– Automatically protect documents that are uploaded to a central data store.
– Protect documents by preventing users from printing sensitive corporate data.
What should you recommend?
A. Assign multiple bindings in Internet Information Services (IIS).
B. Create managed handler mappings in Internet Information Services (IIS).
C. Install Network Load Balancing on each Web server.
D. Install failover clustering on each Web server.
Answer: C
QUESTION 179
Contoso, Ltd. is merging with Litware, Inc. Contoso has an Active Directory Domain Services (AD DS) domain with several child domains. Litware has a UNIX-based environment that contains the Kerberos V5 protocol. Litware users must have access to only resources in the root Contoso domain. Contoso users must not have access to the Litware domain. You need to ensure that Litware users can access the necessary Contoso resources. What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
A. Create a nontransitive one-way realm trust from Contoso to Litware.
B. Create a transitive one-way realm trust from Contoso to Litware.
C. Create a transitive two-way realm trust between Contoso and Litware.
D. Create a nontransitive two-way realm trust between Contoso and Litware.
Answer: B
QUESTION 180
A company has a main office and several branch offices. The corporate network contains an Active Directory Domain Services (AD DS) domain. All file servers in the domain run Windows Server 2008 R2. File servers contain a large amount of data that undergoes frequent changes. Normal hours of business operations are from 8:00 A.M. to 5:00 P.M. You need to recommend a solution for replicating file server volumes between branch offices that minimizes the impact on business operations. What should you recommend? (More than one answer choice may achieve the goal.
Select the BEST answer.)
A. Configure Distributed File System Replication (DFS-R) with a bandwidth limit.
B. Configure Distributed File System Replication (DFS-R) with a schedule.
C. Configure File Server Resource Manager (FSRM).
D. Configure Distributed File System (DFS) Namespaces on each file server.
Answer: C
If you want to pass Microsoft 70-647 successfully, donot missing to read latest lead2pass Microsoft 70-647 practice tests.
If you can master all lead2pass questions you will able to pass 100% guaranteed.