70-646 무료 덤프문제 온라인 액세스

A company has a single Active Directory Domain Services (AD DS) domain and a single Remote Desktop Session Host (RD Session Host). The RD Session Host is approaching full memory capacity. All servers run Windows Server 2008 R2.
You are designing a Remote Desktop Services (RDS) infrastructure. The infrastructure must meet the following requirements:
Allow infrastructure capacity to increase.
Minimize the number of physical servers.
Do not require administrative action on the client computers if the infrastructure capacity increases. You need to design an RDS infrastructure that meets the requirements.
What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

• A.Migrate the RD Session Host to a virtual machine (VM) running in Microsoft Hyper-V. Add memory to the VM as demand increases.
• B.Add RD Session Hosts as demand increases, and use Group Policy to direct users to the correct server.
• C.Install and configure Windows Server Resource Manager (WSRM) on the RD Session Host to control user resource allocation.
• D.Implement an RD Session Host server farm and add servers as required.

Testlet: Tailspin Toys
You need to recommend a solution to meet the IT security requirements and data encryption requirements for TT-FILE01 with the minimum administrative effort.
What should you recommend? (Choose all that apply.)
Case Study Title (Case Study): General Background
You are the Windows Server Administrator for Tailspin Toys. Tailspin Toys has a main office and a manufacturing office.
Tailspin Toys recently acquired Wingtip Toys and is in the beginning stages of Merging the IT environments. Wingtip Toys has a main office and a sales office.
Technical Background
The companies use the network subnets indicated in the following table:

The Tailspin Toys network and the Wingtip Toys are connected by a point-to-point dedicated 45 Mbps circuit that terminates in the main offices.
The current Tailspin Toys server topology is shown in the following table: The Tailspin Toys environment has the following characteristics:

All servers are joined to the tailspintoys.com domain.
In the Default Domain Policy, the Retain old events Group Policy setting is enabled.
An Active Directory security group named "Windows System Administrators" is used to control all files and folders on TT-PRINT01.
A Tailspin Toys administrator named Marx has been delegated rights to multiple Organizational Units (OUs) and object in the tailspintoys.com domain.
Tailspin Toys developers use Hyper-V Virtual Machines (VM's) for development. There are 10
development VM's named TT-DEV01 to TT-DEV20.
The current Wingtip Toys server topology is shown in the following table:

All servers in the Wingtip Toys environment are joined to the wingtiptoys.com domain.
Infrastructure Services
You must ensure that the following infrastructure services requirements are met:
All domain zones must be stored as Active Directory-integrated zones.
Only DNS servers located in the Tailspin Toys main offices may communicate with the DNS servers at Wingtip Toys.
Only DNS servers located in the Wingtip Toys main offices may communicate with the DNS servers at Tailspin Toys
All tailspintoys.com resources must be resolved from the Wingtip Toys offices.
All wingtiptoys.com resources must be resolved from the Tailspin toys offices.
Certificates must be distributed automatically to all Tailspin Toys and Wingtip Toys computers.
Delegated Administration
You must ensure that the following delegated administration requirements are met:
Tailspin Toys IT security administrators must be able to create, modify and delete user objects in the
wingtip.com domain.
Members of the Domain Admins Group in the tailspintoys.com domain must have full access to the wingtiptoys.com Active Directory environment.
A delegation policy must grant minimum access rights and simplify the process of delegating rights.
Minimum permissions must always be delegated to ensure that the least privilege is granted for a job task.
Members of the TAILSPINTOYS\Helpdesk group must be able to update drivers and add printer ports on TT-PRINT01.
Members of the TAILSPINTOYS\Helpdesk group must not be able to cancel a print job on TT-PRINT01.
Tailspin Toys developers must be able to start, stop and apply snapshots to their development VM's.
IT Security
Server security must be automated to ensure that newly deployed servers automatically have the same security configurations as existing servers.
Auditing must be configured to ensure that the deletion of users objects and OUs is logged.
Microsoft Word and Microsoft Excel files must be automatically encrypted when uploaded to the
Confidential documents library on the Tailspin Toys Microsoft SharePoint site.
Multi factor authentication must control access to Tailspin Toys domain controllers.
All file and folder auditing must capture the reason for access.
All folder auditing must capture all delete actions for all existing folders and newly created folders.
New events must be written to the Security event log in the tailspintoys.com domain and retained
indefinitely.
Drive X:\ on the TT-FILE01 must be encrypted by using Windows BitLocker Drive Encryption and must be automatically unlock.

• A.Store BitLocker recovery information in the tailspintoys.com domain.
• B.Migrate TT-FILE01 to Windows Server 2008 R2 Enterprise.
• C.Turn on BitLocker on drive X:\ and select the Automatically unlock this drive on this computer option.
• D.Turn on BitLocker on the system drive.

Testlet: Contoso, Ltd
http://technet.microsoft.com/en-us/library/dd758760(v=ws.10).aspx
You are evaluating whether to add an additional hard disk drive to each file server and create a striped volume for the data files.
Which storage requirement is met by adding the hard disk drive and creating the striped volume?
Case Study Title (Case Study): COMPANY OVERVIEW
Contoso, Ltd. is a consulting company that has a main office and two branch offices. The main office is located in Johannesburg. The branch offices are located in Brisbane and Montreal. The Johannesburg office has 400 users. Each branch office has 100 users.
PLANNED CHANGES
Contoso plans to open a new branch office. The new office will have a 512-Kbps connection to the Montreal office and a 2-Mbps connection to the Internet.
The new branch office will have a domain controller, a DirectAccess server, a file server, and a Web server. All branch office servers will be virtualized.
Contoso plans to implement role-based access control for all new virtual machines (VMs) deployed on Hyper-V servers.
In the new branch office, a user named User1 must be permitted to perform only the following actions on the Hyper-V server:
Start the VMs.
View the configuration of the VMs.
EXISTING ENVIRONMENT
All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.
The main office has multiple file servers. Each branch office has one file server. Each file server has two hard disks. One disk has the server' s operating system installed and the other disk stores data files. File server backups are performed regularly.
The main office has a Windows Server Update Services (WSUS) server. All client computers are configured to receive updates from the WSUS server.
The main office connects to each branch office by using a 512-Kbps WAN link.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named contoso.com. An Active Directory site exists for each office. Each Active Directory site contains three subnets. Each subnet contains client computers.
The main office has two domain controllers. Each branch office has one domain controller.
REQUIREMENTS Storage Requirements
Contoso must meet the following storage requirements:
Improve data availability on the file servers.
Improve the performance of the file servers.
Limit each user's storage space on the file servers to 2 GB.
Prevent users from storing audio and video files on the file servers.
Provide additional storage on the file servers without causing downtime.
Enable users to access the previous versions of all the files stored on the file servers.
Technical Requirements
Contoso must meet the following technical requirements:
Minimize the potential attack surface.
Minimize WAN link utilization between the offices.
Minimize the number of server licenses purchased.
Minimize server downtime caused by Applying updates.
Minimize the amount of administrative effort required to approve the updates.
Minimize the amount of time it takes for users in the branch offices to access files on the file servers in the main office.
Problem Statements
Users in the accounting department use a custom Application named App1. The configurations for App1 can only be changed by editing the registry. Currently, a technician must visit each client computer in the accounting department to change the App1 configurations.

• A.Improve the performance of the file servers.
• B.Provide additional storage on the file servers without causing downtime.
• C.Improve data availability on the file servers.
• D.Enable users to access the previous versions of all the files stored on the file servers.

A company has its main office in New York and branch offices in Miami and Quebec. All sites are connected by reliable WAN links.
You are designing a Windows Server Update Services (WSUS) deployment strategy. The deployment strategy must meet the following requirements:
Download updates from Windows Update only in the New York office.
Ensure that the update language can be specified for the Quebec office. You need to design a deployment strategy that meets the requirements.
How should you configure the servers and hierarchy types?
To answer, drag the appropriate server types and hierarchy types from the list to the correct location or locations in the answer area.
Select and Place:

정답:

Explanation/Reference: WSUS SERVER LAYOUT
You can connect WSUS servers in Autonomous mode (to achieve distributed administration) or in Replica mode (to achieve centralized administration). You do not have to deploy a server hierarchy that uses only one mode: you can deploy a WSUS solution that uses both autonomous and replica WSUS servers.
Autonomous mode (Distributed Administration)
Distributed management by using autonomous mode is the default installation option for WSUS. In autonomous mode, an upstream WSUS server shares updates with downstream servers during synchronization. Downstream WSUS servers are administered separately and they do not receive update approval status or computer group information from the upstream server. By using the distributed management model, each WSUS server administrator selects update languages, creates computer groups, assigns computers to groups, tests and approves updates, and makes sure that the correct updates are installed to the appropriate computer groups.

Replica mode (Centralized Administration)
In replica mode, an upstream WSUS server shares updates, approval status, and computer groups with downstream servers. Downstream replica servers inherit update approvals and are not administered separately from the upstream WSUS server. If you set up several replica servers to connect to a single upstream WSUS server, do not schedule synchronization to run at the same time on each replica server. This practice will avoid sudden surges in bandwidth usage.

http://technet.microsoft.com/en-us/library/dd939820(v=ws.10).aspx

Testlet: Fabrikam Inc
http://technet.microsoft.com/en-us/library/cc749610%28WS.10%29.aspx
You need to recommend a file access solution for the Templates share.
Which two actions should you recommend? (Each correct answer presents part of the solution. Choose two.)
Case Study Title (Case Study): COMPANY OVERVIEW
Fabrikam Inc. is a manufacturing company that has a main office and a branch office.
PLANNED CHANGES
You plan to deploy a failover cluster named Cluster1 in the branch office. Cluster1 will be configured to meet the following requirements:
The cluster will host eight virtual machines (VMs).
The cluster will consist of two nodes named Node1 and Node2.
The quorum mode for the cluster will be set to Node and Disk Majority.
A user named Admin1 will configure the virtual switch configuration of the VMs.
The cluster nodes will use shared storage on an iSCSI Storage Area Network (SAN).
You plan to configure a VM named File2 as a file server. Users will store confidential files on File2.
You plan to deploy a Microsoft Forefront Threat Management Gateway (TMG) server in each site. The Forefront TMG server will be configured as a Web proxy.
EXISTING ENVIRONMENT
The research department is located in the branch office. Research users frequently travel to the main office.
Existing Active Directory/Directory Services
The network contains a single-domain Active Directory forest named fabrikam.com. The functional level of the forest is Windows Server 2008.
The relevant organizational units (OUs) for the domain are configured as shown in the following table.

The relevant sites for the network are configured shown in the following table.

The relevant group policy objects (GPOs) are configured as shown in the following table.

Existing Network Infrastructure
All users run windows server 2008 R2. The relevant servers are configured as shown in following table.

WSUS2 is configured as a downstream replica server.
File1 contains a share named Templates. Users access the Templates share by using the path \ \fabrikam.com\dfs\templates.
File1 has the Distributed File System (DFS) Replication role service and the DFS Namespaces role service installed.
TECHNICAL REQUIREMENTS
Fabrikam must meet the following requirements:
Minimize the cost of IT purchases.
Minimize the potential attack surface on the servers.
Minimize the number of rights assigned to administrators.
Minimize the number of updates that must be installed on the servers.
Ensure that Internet Explorer uses the local ForeFront TMG server to connect to the Internet.
Ensure that all client computers continue to receive updates from WSUS if a WSUS server fails.
Prevent unauthorized users from accessing the data stored on the VMs by making offline copies of the
VM files. Fabrikam must meet the following requirements for the Templates share:
Ensure that users access the files in the Templates share from a server in their local site.
Ensure that users always use the same UNC path to access the Templates share, regardless of the site in which the users are located.

• A.Add File2 as a namespace server for \\fabrikam.com\dfs.
• B.In the Group Policy preferences of GPO2 and GPO3, add new mapped drives.
• C.Create a DFS Replication group that contains \\File1\templates and \\File2\templates.
• D.Add \\File2\templates as a folder target for \\fabrikam.com\dfs\templates.