70-646 무료 덤프문제 온라인 액세스
| 시험코드: | 70-646 |
| 시험이름: | Windows Server 2008, Server Administrator |
| 인증사: | Microsoft |
| 무료 덤프 문항수: | 266 |
| 업로드 날짜: | 2025-08-22 |
Your network consists of a single Active Directory site that includes two network segments. The network segments connect by using a router that is RFC 1542 compliant.
You plan to use Windows Deployment Services (WDS) to deploy Windows Server 2008 R2 servers. All new servers support PreBoot Execution Environment (PXE).
You need to design a deployment strategy to meet the following requirements:
Support Windows Server 2008 R2.
Deploy the servers by using WDS in both network segments.
Minimize the number of servers used to support WDS. What should you include in your design?
Testlet: A, Datum
You need to recommend a strategy for the file servers that meets the company's technical requirements.
What should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
A, Datum Corporation is a manufacturing company that has a main office and two branch offices.
The main office is located in Denver. The branch offices are located in New York and Montreal.
The main office has 10,000 users. Each branch office has approximately 200 users.
PLANNED CHANGES
A, Datum plans to deploy a new intranet site named Site1 in the main office. Two servers that run a Server Core installation of Windows Server 2008 R2 are requisitioned for the deployment of Site1.
You plan to deploy a domain controller in each office.
You have a new server named Backup1. All servers will be backed up remotely by using Windows Server Backup on Backup1.
BUSINESS GOALS
A Datum has the following business goals:
Changes to the environment must minimize costs.
Changes to the environment must optimize the use of new hardware.
The costs to manage the network infrastructure and the servers must be minimized.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The network contains a Web server named Web1. Web1 is located in the perimeter network and is accessible from the internal network and the Internet. Web1 runs a Server Core installation of Windows Server 2008 R2 Standard.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named adatum.com.
The main office has two domain controllers.
Existing Network Infrastructure
Each office has a file server.
The main office connects to each branch office by using a WAN link. Users in the branch offices frequently access the file server in the main office.
Current Administration Model
All domain administrators work in the main office and remotely manage the servers by using their Windows 7 computers.
A group named BranchAdmins has the rights to manage all of the client computers in the branch offices.
You have several ADMX files that contain custom application settings.
REQUIREMENTS Security Requirements
The BranchAdmins group members must be able to install updates and drivers on the domain
controllers in the branch offices.
Passwords must not be stored by using reversible encryption.
All authentication traffic on the network must be encrypted.
Application Requirements
A new application named WebApp2 must be deployed on Web1. The WebApp2 deployment must meet the following requirements:
Users must be authenticated to access WebApp2.
WebApp2 must support Web browsers from various vendors.
WebApp2 must be accessible to internal users and Internet users.
A failure of WebApp2 must not cause other Web applications to fail.
Internet users must be required to configure the minimum number of changes on their client computers
to access WebApp2. Site1 must be configured to meet the following requirements:
Site1 must support the most user connections possible.
Site1 must be backed up every day by a remote server,
If a single Web server fails, users must be able to access Site1.
If a single Web server fails, users must not receive an error message when they access Site1.
Technical Requirements
You must ensure that domain administrators can access the ADMX files from any client computer that they use to manage Group Policies.
You must ensure that the domain administrators are notified by e-mail each time a user copies video files to the file servers.
Testlet: Proseware, Inc
You need to recommend a solution for managing administrative rights for the branch office client computers. The solution must meet the company's technical requirements.
What should you recommend configuring?
Case Study Title (Case Study): COMPANY OVERVIEW
Proseware, Inc. is a publishing company that has a main office and a branch office.
The main office is located in New York. The branch office is located in Sydney. The main office has 5,000 users. The branch office has 1,000 users.
PLANNED CHANGES
Proseware plans to deploy a new 64-bit application named App2 to 10 users in the branch office. Only members of the local Administrators group can run App2.
Proseware is evaluating whether to deploy virtual desktop pools. The virtual desktop pools must meet the following requirements:
Apply the settings in GPO1 to the virtual machines (VMs).
Prevent the VMs from receiving the Automatic Updates settings from GPO2.
Ensure that only the host VM is affected if a virtual hard disk (VHD) file becomes corrupt.
Minimize the amount of storage used to support the VMs.
Minimize the amount of memory and CPU resources used by the VMs.
Minimize administrative effort.
EXISTING ENVIRONMENT
All servers run either Windows Server 2008 or Windows Server 2008 R2. All of the client computers in the main office run Windows 7. All of the client computers in the branch office run Windows XP (x86) with Service Pack 3 (SP3).
All of the client computers in the main office are configured as Microsoft Enterprise Desktop Visualization (MED-V) and Microsoft Application Virtualization (App-V) clients.
A two-node Hyper-V cluster is deployed in the main office. The cluster uses Clustered Shared Volumes.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named proseware.com. The functional level of the forest is Windows Server 2008.
The relevant organizational units (OUs) for the domain are configured as shown in the following table.
A custom Group Policy object (GPO) named GPO1 is linked to the domain, GPO1 contains corporate computer security settings.
A custom GPO named GPO2 is linked to both office OUs. GPO2 contains Windows Server Update Services (WSUS) settings.
Existing Network Infrastructure
Each office has servers that have the following server roles or role services installed:
WSUS
Hyper-V
File Services
Remote Desktop Web Access (RD Web Access)
Remote Desktop Session Host (RD Session Host)
Remote Desktop Virtualization Host (RD Virtualization Host)
Remote Desktop Connection Broker (RD Connection Broker) REQUIREMENTS Technical Requirements When users interactively logs on to any of the client computers in the branch office, they must automatically receive the local administrator rights to that computer. When users logs off, they must lose the administrator rights.
The disk space on all file servers must be monitored. If any file server has less than 20% free disk space on a volume, a script must run that deletes temporary files.
Problem Statements
The main office has a shared folder named Legal. The Legal share is only accessed by users in the legal department. Legal department users report that it takes a long time to locate files in the Legal share by using keyword searches.
Testlet: Contoso, Ltd
http://technet.microsoft.com/en-us/library/dd758760(v=ws.10).aspx
You are evaluating whether to add an additional hard disk drive to each file server and create a striped volume for the data files.
Which storage requirement is met by adding the hard disk drive and creating the striped volume?
Case Study Title (Case Study): COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The main office is located in Johannesburg. The branch offices are located in Brisbane and Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection to the Montreal office and a 2-Mbps connection to the Internet.
The new branch office will have a domain controller, a DirectAccess server, a file server, and a Web server. All branch office servers will be virtualized.
Contoso plans to implement role-based access control for all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the following actions on the Hyper-V server:
Start the VMs.
View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file server has two hard disks. One disk has the server' s operating system installed and the other disk stores data files. File server backups are performed regularly.
The main office has a Windows Server Update Services (WSUS) server. All client computers are configured to receive updates from the WSUS server.
The main office connects to each branch office by using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active Directory site exists for each office. Each Active Directory site contains three subnets. Each subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS Storage Requirements
Contoso must meet the following storage requirements:
Improve data availability on the file servers.
Improve the performance of the file servers.
Limit each user's storage space on the file servers to 2 GB.
Prevent users from storing audio and video files on the file servers.
Provide additional storage on the file servers without causing downtime.
Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
Minimize the potential attack surface.
Minimize WAN link utilization between the offices.
Minimize the number of server licenses purchased.
Minimize server downtime caused by Applying updates.
Minimize the amount of administrative effort required to approve the updates.
Minimize the amount of time it takes for users in the branch offices to access files on the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The configurations for App1 can only be changed by editing the registry. Currently, a technician must visit each client computer in the accounting department to change the App1 configurations.
Testlet: Tailspin Toys
You need to recommend a solution to meet the certificate distribution requirements.
What should you recommend?
Case Study Title (Case Study): General Background
You are the Windows Server Administrator for Tailspin Toys. Tailspin Toys has a main office and a manufacturing office.
Tailspin Toys recently acquired Wingtip Toys and is in the beginning stages of Merging the IT environments. Wingtip Toys has a main office and a sales office.
Technical Background
The companies use the network subnets indicated in the following table: The Tailspin Toys network and the Wingtip Toys are connected by a point-to-point dedicated 45 Mbps circuit that terminates in the main offices.
The current Tailspin Toys server topology is shown in the following table:
The Tailspin Toys environment has the following characteristics: All servers are joined to the tailspintoys.com domain. In the Default Domain Policy, the Retain old events Group Policy setting is enabled. An Active Directory security group named "Windows System Administrators" is used to control all files and folders on TT-PRINT01. A Tailspin Toys administrator named Marx has been delegated rights to multiple Organizational Units (OUs) and object in the tailspintoys.com domain. Tailspin Toys developers use Hyper-V Virtual Machines (VM's) for development. There are 10 development VM's named TT-DEV01 to TT-DEV20.
The current Wingtip Toys server topology is shown in the following table: All servers in the Wingtip Toys environment are joined to the wingtiptoys.com domain.
Infrastructure Services
You must ensure that the following infrastructure services requirements are met:
All domain zones must be stored as Active Directory-integrated zones.
Only DNS servers located in the Tailspin Toys main offices may communicate with the DNS servers at Wingtip Toys.
Only DNS servers located in the Wingtip Toys main offices may communicate with the DNS servers at Tailspin Toys
All tailspintoys.com resources must be resolved from the Wingtip Toys offices.
All wingtiptoys.com resources must be resolved from the Tailspin toys offices.
Certificates must be distributed automatically to all Tailspin Toys and Wingtip Toys computers.
Delegated Administration
You must ensure that the following delegated administration requirements are met: Tailspin Toys IT security administrators must be able to create, modify and delete user objects in the wingtip.com domain.
Members of the Domain Admins Group in the tailspintoys.com domain must have full access to the wingtiptoys.com Active Directory environment.
A delegation policy must grant minimum access rights and simplify the process of delegating rights.
Minimum permissions must always be delegated to ensure that the least privilege is granted for a job task.
Members of the TAILSPINTOYS\Helpdesk group must be able to update drivers and add printer ports on TT-PRINT01.
Members of the TAILSPINTOYS\Helpdesk group must not be able to cancel a print job on TT-PRINT01.
Tailspin Toys developers must be able to start, stop and apply snapshots to their development VM's.
IT Security
Server security must be automated to ensure that newly deployed servers automatically have the same security configurations as existing servers.
Auditing must be configured to ensure that the deletion of users objects and OUs is logged.
Microsoft Word and Microsoft Excel files must be automatically encrypted when uploaded to the
Confidential documents library on the Tailspin Toys Microsoft SharePoint site.
Multi factor authentication must control access to Tailspin Toys domain controllers.
All file and folder auditing must capture the reason for access.
All folder auditing must capture all delete actions for all existing folders and newly created folders.
New events must be written to the Security event log in the tailspintoys.com domain and retained
indefinitely.
Drive X:\ on the TT-FILE01 must be encrypted by using Windows BitLocker Drive Encryption and must be automatically unlock.