Microsoft 070-646 Actual Free Exam Questions & Community Discussion

Testlet: City Power & Light
You need to recommend a solution for managing the GPOs that supports the company's planned changes.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
City Power & Light is an international utilities company. The company has a sales department, a finance department, and a production department.
Physical Location
The company has a main office and a branch office.
EXISTING ENVIRONMENT Network Infrastructure
The network contains the following servers:
A server named Server1 that runs Windows Server 2008 R2 Enterprise and has the Hyper-V role installed. Server1 hosts three virtual machines (VMs) that run Windows Server 2008 R2 Enterprise. The VMs always run.
A Windows Server Update Services (WSUS) server in the main office. The WSUS server manages updates for the client computers in the main office only.
Several file servers that store data on an iSCSI Storage Area Network (SAN). The file servers have multiple network cards.
An enterprise root certification authority (CA) named CA1 that runs Windows Server 2008 R2.
The branch office connects to the main office by using a WAN link. The WAN link is highly saturated. All
client computers on the network connect to the Internet by using a single Internet connection at the main office.
Problem Statements
All client computers run Microsoft Office 2003. The client computers for the users in the sales department run a 64-bit version of Windows 7. Sales users must be able to run a 64-bit version of Office 2010 and Office 2003 concurrently when they work offline. Office 2010 must be deployed by using the minimum amount of administrative effort.
REQUIREMENTS Business Goal
City Power & Light has the following business goals:
Software and hardware costs must be minimized, whenever possible.
Due to power restrictions at the data center in the main office, all new servers must be deployed on VMs, whenever possible.
Planned Changes
City Power & Light plans to implement the following changes in their network:
A WSUS server in the branch office.
A robotic-based tape library for the file servers.
A document management system that supports the following requirements: Retains multiple versions of a document; Automatically applies access policies to documents
A solution for managing Group Policy objects (GPOs) that supports the following: Version tracking; Offline modification; Role-based access control
Nine VMs that run Windows Server 2008 R2 Enterprise. Only five VMs will run concurrently.
Two Microsoft SQL Server 2008 Enterprise servers in a failover cluster. The cluster will be attached to a hardware RAID-5 array that has five 2-terabyte drives.
Five additional physical servers for the finance department. The new servers will use native-boot virtual hard disks (VHDs). The VHD images will contain a single partition.
Technical Requirements
City Power & Light must meet the following technical requirements:
The file servers must maintain their connection to the SAN if a network card fails.
The bandwidth utilization between the main office and the branch office must be minimized.
Administrators in the main office must approve or reject updates for all of the client computers in all of the offices.
Security Requirements
City Power & Light must meet the following security requirements:
All help desk technicians must be able to approve certificate requests and revoke certificates. The help desk technicians must be prevented from modifying the properties of the CA.
All telecommunications technicians must be able to manage the virtual networks of Server1. The telecommunications technicians must be prevented from performing all other Hyper-V management task.
All of the documents created by users in the finance department must be shared with all of the managers in the company. After 30 days, only those who created the documents must be able to access the documents.

Testlet: Northwind Traders
http://technet.microsoft.com/en-us/library/cc757470(v=WS.10).aspx
You need to recommend a solution for deploying the custom Word dictionary.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
Northwind Traders is an import/export company that has a main office and two branch offices. The main office is located in Toronto. The branch offices are located in Vancouver and Seattle. The main office has 2,000 users. Each branch office has 500 users.
EXISTING ENVIRONMENT
All client computers run Windows 7 Enterprise. All servers run Windows Server 2008 R2. All new servers are deployed by using Windows Deployment Services (WDS).
Northwind Traders has multiple Hyper-V servers. The Hyper-V servers are managed by using Microsoft System Center Virtual Machine Manager (VMM).
The perimeter network contains a standalone server. The server has the Active Directory Lightweight Directory Service (AD LDS) service role installed. AD LDS is administered on the server by using the Active Directory module for Windows PowerShell.
All virtual machines (VMs) access iSCSI-based storage by using a Microsoft iSCSI Initiator installed on the VM.
Existing Active Directory/Directory Services
The network contains a single Active Directory forest named northwindtraders.com.
The forest contains five Remote Desktop servers. All Remote Desktop servers are in an organizational unit (OU) named RD Servers.
TECHNICAL REQUIREMENTS
Northwind Traders must meet the following technical requirements:
Minimize server downtime.
Ensure that you can recover all of the data hosted on the VMs.
Ensure that you can perform bare metal restores of the Hyper-V servers.
Minimize the number of times a server restarts when it is deployed.
Monitor the CPU utilization, memory utilization, and disk utilization of all the servers to analyze
performance trends.
Ensure that a specific set of Group Policy settings are applied to users who use Remote Desktop to connect to the Remote Desktop servers. The settings must differ from those applied when the users log on locally to their own computers.
Copy a custom Microsoft Office Word dictionary to the computers in the legal department. Update the custom dictionary on a regular basis. Copy the updated version of the dictionary as soon as possible to the legal department computers.

Testlet: Woodgrove Bank
You need to recommend changes to the name resolution infrastructure that meet the company's technical requirements.
What should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT Active Directory Environment
The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
One Windows Server Update Services (WSUS) server.
Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
Ten file servers host multiple shared folders. The file servers run either Windows Server 2003 or
Windows Server 2008 R2.
One domain-based Distributed File System (DFS) namespace that has two replicas. The DFS servers
run Windows Server 2008 R2. The DFS namespace is configured to use Windows 2000 Server mode. Each branch office has a WAN link to the main office. The WAN links are highly saturated. Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS Planned Changes
Woodgrove Bank plans to implement the following changes:
Deploy a new application named App1 on each client computer. App1 has a Windows Installer package
and is compatible with Windows XP, Windows Vista, and Windows 7.
Designate a user in each office to manage the address information of the user accounts in that office.
Deploy a new branch office named Branch22 that has the following servers: One file server named Server1 & Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
Minimize hardware and software costs, whenever possible.
Encrypt all DNS replication traffic between the DNS servers.
Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
Ensure that users can only view the list of DFS targets to which they are assigned permissions.
Minimize the amount of network traffic between the main office and the branch offices, whenever
possible.
Minimize the amount of name resolution traffic from the branch offices to the DNS servers in the main office.
Ensure that the administrators in the main office manage all Windows update approvals and all
computer groups.
Manage all of the share permissions and the folder permissions for the file servers from a single
management console.
Ensure that if a file on a file server is deleted accidentally, users can revert to a previous version of the file without administrator intervention.
Ensure that administrators are notified by e-mail each time a user successfully copies a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
Access rights and user rights must be minimized.
The Guest account must be disabled on all servers.
Internet Information Services (IIS) must only be installed on authorized servers.

You need to design a Windows Server Update Services (WSUS) infrastructure that meets the following requirements:
The updates must be distributed from a central location.
All computers must continue to receive updates in the event that a server fails. What should you include in your design?

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains 200 Windows Server 2008 R2 servers.
You need to plan a monitoring solution that meets the following requirements:
Sends a notification by email to the administrator if an application error occurs on any of the servers
Uses the minimum amount of administrative effort What should you include in your plan?

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. All client computers run Windows 7. Some users have laptop computers and work remotely from home.
You need to plan a data provisioning infrastructure to secure sensitive files. Your plan must meet the following requirements:
Files must be stored in an encrypted format.
Files must be accessible by remote users over the Internet.
Files must be encrypted while they are transmitted over the Internet. What should you include in your plan?

Testlet: Woodgrove Bank
You need to recommend a solution for managing the address information of the user accounts. The solution must meet the company's security requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT Active Directory Environment
The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
One Windows Server Update Services (WSUS) server.
Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
Ten file servers host multiple shared folders. The file servers run either Windows Server 2003 or
Windows Server 2008 R2.
One domain-based Distributed File System (DFS) namespace that has two replicas. The DFS servers
run Windows Server 2008 R2. The DFS namespace is configured to use Windows 2000 Server mode. Each branch office has a WAN link to the main office. The WAN links are highly saturated. Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS Planned Changes
Woodgrove Bank plans to implement the following changes:
Deploy a new application named App1 on each client computer. App1 has a Windows Installer package and is compatible with Windows XP, Windows Vista, and Windows 7.
Designate a user in each office to manage the address information of the user accounts in that office.
Deploy a new branch office named Branch22 that has the following servers: One file server named Server1 & Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
Minimize hardware and software costs, whenever possible.
Encrypt all DNS replication traffic between the DNS servers.
Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
Ensure that users can only view the list of DFS targets to which they are assigned permissions.
Minimize the amount of network traffic between the main office and the branch offices, whenever possible.
Minimize the amount of name resolution traffic from the branch offices to the DNS servers in the main office.
Ensure that the administrators in the main office manage all Windows update approvals and all
computer groups.
Manage all of the share permissions and the folder permissions for the file servers from a single management console.
Ensure that if a file on a file server is deleted accidentally, users can revert to a previous version of the file without administrator intervention.
Ensure that administrators are notified by e-mail each time a user successfully copies a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
Access rights and user rights must be minimized.
The Guest account must be disabled on all servers.
Internet Information Services (IIS) must only be installed on authorized servers.

Testlet: Proseware, Inc
You need to recommend a solution for configuring the Automatic Updates settings on the VMs.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
Proseware, Inc. is a publishing company that has a main office and a branch office.
The main office is located in New York. The branch office is located in Sydney. The main office has 5,000 users. The branch office has 1,000 users.
PLANNED CHANGES
Proseware plans to deploy a new 64-bit application named App2 to 10 users in the branch office. Only members of the local Administrators group can run App2.
Proseware is evaluating whether to deploy virtual desktop pools. The virtual desktop pools must meet the following requirements:
Apply the settings in GPO1 to the virtual machines (VMs).
Prevent the VMs from receiving the Automatic Updates settings from GPO2.
Ensure that only the host VM is affected if a virtual hard disk (VHD) file becomes corrupt.
Minimize the amount of storage used to support the VMs.
Minimize the amount of memory and CPU resources used by the VMs.
Minimize administrative effort.
EXISTING ENVIRONMENT
All servers run either Windows Server 2008 or Windows Server 2008 R2. All of the client computers in the main office run Windows 7. All of the client computers in the branch office run Windows XP (x86) with Service Pack 3 (SP3).
All of the client computers in the main office are configured as Microsoft Enterprise Desktop Visualization (MED-V) and Microsoft Application Virtualization (App-V) clients.
A two-node Hyper-V cluster is deployed in the main office. The cluster uses Clustered Shared Volumes.
Existing Active Directory/Directory Services
The network contains a single Active Directory domain named proseware.com. The functional level of the forest is Windows Server 2008.
The relevant organizational units (OUs) for the domain are configured as shown in the following table.

A custom Group Policy object (GPO) named GPO1 is linked to the domain, GPO1 contains corporate computer security settings.
A custom GPO named GPO2 is linked to both office OUs. GPO2 contains Windows Server Update Services (WSUS) settings.
Existing Network Infrastructure
Each office has servers that have the following server roles or role services installed:
WSUS
Hyper-V
File Services
Remote Desktop Web Access (RD Web Access)
Remote Desktop Session Host (RD Session Host)
Remote Desktop Virtualization Host (RD Virtualization Host)
Remote Desktop Connection Broker (RD Connection Broker) REQUIREMENTS Technical Requirements When users interactively logs on to any of the client computers in the branch office, they must automatically receive the local administrator rights to that computer. When users logs off, they must lose the administrator rights.
The disk space on all file servers must be monitored. If any file server has less than 20% free disk space on a volume, a script must run that deletes temporary files.
Problem Statements
The main office has a shared folder named Legal. The Legal share is only accessed by users in the legal department. Legal department users report that it takes a long time to locate files in the Legal share by using keyword searches.

Testlet: Woodgrove Bank
You plan to implement a WSUS server in a branch office.
You need to recommend a solution for deploying the WSUS server that meets the company's technical requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW Overview
Woodgrove Bank is an international financial organization.
Physical Location
The company has a main office and multiple branch offices.
EXISTING ENVIRONMENT Active Directory Environment
The network contains one Active Directory forest. A separate domain exists for each office.
Network Infrastructure
All offices have domain controllers that are configured as DNS servers. All client computers are configured to connect to the DNS servers in their respective office only.
The main office has the following servers and client computers:
One Windows Server Update Services (WSUS) server.
Client computers that run either Windows XP Service Pack 3 (SP3) or Windows 7.
Ten file servers host multiple shared folders. The file servers run either Windows Server 2003 or
Windows Server 2008 R2.
One domain-based Distributed File System (DFS) namespace that has two replicas. The DFS servers
run Windows Server 2008 R2. The DFS namespace is configured to use Windows 2000 Server mode. Each branch office has a WAN link to the main office. The WAN links are highly saturated. Each office has a dedicated high-speed Internet connection.
All of the client computers in the branch offices run Windows 7.
User Problems
Users report that it is difficult to find the shared folders on the network.
REQUIREMENTS Planned Changes
Woodgrove Bank plans to implement the following changes:
Deploy a new application named App1 on each client computer. App1 has a Windows Installer package and is compatible with Windows XP, Windows Vista, and Windows 7.
Designate a user in each office to manage the address information of the user accounts in that office.
Deploy a new branch office named Branch22 that has the following servers: One file server named Server1 & Two domain controllers named DC10 and DC11 that are configured as DNS servers.
Technical Requirements
Woodgrove Bank must meet the following technical requirements:
Minimize hardware and software costs, whenever possible.
Encrypt all DNS replication traffic between the DNS servers.
Ensure that users in the branch offices can access the DFS targets if a WAN link fails.
Ensure that users can only view the list of DFS targets to which they are assigned permissions.
Minimize the amount of network traffic between the main office and the branch offices, whenever possible.
Minimize the amount of name resolution traffic from the branch offices to the DNS servers in the main office.
Ensure that the administrators in the main office manage all Windows update approvals and all
computer groups.
Manage all of the share permissions and the folder permissions for the file servers from a single
management console.
Ensure that if a file on a file server is deleted accidentally, users can revert to a previous version of the file without administrator intervention.
Ensure that administrators are notified by e-mail each time a user successfully copies a file that has an .avi extension to one of the file servers.
Security Requirements
Woodgrove Bank must meet the following security requirements:
Access rights and user rights must be minimized.
The Guest account must be disabled on all servers.
Internet Information Services (IIS) must only be installed on authorized servers.

Testlet: School of Fine Art
You need to recommend an update management strategy for the Chicago campus that meets the company's technical requirements.
What should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite campuses.
The main campus is located in New York. The satellite campuses are located in Los Angeles and Chicago.
The main campus has approximately 4,000 users made up of students, faculty, and employees. Each satellite campus has approximately 1,000 users made up of students, faculty, and employees.
EXISTING ENVIRONMENT
The network contains a single Active Directory domain named fineartschool.net.
All servers run Windows Server 2008 R2. All client computers run either Windows XP or Windows 7.
The network contains Microsoft Application Virtualization (App-V) and Microsoft Enterprise Desktop Virtualization (MED-V).
Existing Network Infrastructure
The main campus has the following servers:
A file server that contains confidential files.
A print server that has several printers installed.
A server that has the Windows Server Update Services (WSUS) server role installed. All client computers are updated by using the WSUS server.
The main campus has a computer lab. The lab has 50 client computers that run Windows 7 Enterprise.
The computer accounts for the lab computers are located in an organizational unit (OU) named LabOU. The user accounts and computer accounts for all of the students are located in an OU named StudentsOU. Both OUs are child objects in the fineartschool.net domain.
The relevant Group Policy objects (GPOs) are configured as shown in the following table.

REQUIREMENTS Technical Requirements
The computer lab must meet the following requirements:
Ensure that the user settings in all domain-level GPOs are applied to each student.
Prevent the settings in all domain-level GPOs from being applied to the client computers in the computer
lab. The update management infrastructure must meet the following requirements:
Each campus must control the updates for its respective campus.
Update status reports must be sent weekly to the Enterprise Administrator on the main campus.
Application Requirements
All client computers will be upgraded to Windows 7 Enterprise.
An application named App1 runs on every client computer. App1 is only compatible with Windows XP. App1 must remain available after all of the operating system upgrades are complete.
App1 must meet the following requirements:
App1 must be available from the Start menu.
The management of App1 must be centralized.
Each user must have a unique instance of App1.
Security Requirements
Security for the file server on the main campus must meet the following requirements:
Unauthorized users must be prevented from printing sensitive files stored on the server.
The contents of the server's hard disks must remain secure if the physical security of the server is compromised.
Problem Statements
Users report that they receive a different desktop environment every time they log on to a client computer in the computer lab.
The print server on the main campus has reliability issues. A malfunction on a single printer often causes other printers to malfunction.

Your network consists of a single Active Directory forest that contains a root domain and two child domains.
All servers run Windows Server 2008 R2. A corporate policy has the following requirements:
All local guest accounts must be renamed and disabled.
All local administrator accounts must be renamed.
You need to recommend a solution that meets the requirements of the corporate policy. What should you recommend?

Testlet: Tailspin Toys
You need to recommend a solution to meet the certificate distribution requirements.
What should you recommend?
Case Study Title (Case Study): General Background
You are the Windows Server Administrator for Tailspin Toys. Tailspin Toys has a main office and a manufacturing office.
Tailspin Toys recently acquired Wingtip Toys and is in the beginning stages of Merging the IT environments. Wingtip Toys has a main office and a sales office.
Technical Background
The companies use the network subnets indicated in the following table: The Tailspin Toys network and the Wingtip Toys are connected by a point-to-point dedicated 45 Mbps circuit that terminates in the main offices.

The current Tailspin Toys server topology is shown in the following table:

The Tailspin Toys environment has the following characteristics: All servers are joined to the tailspintoys.com domain. In the Default Domain Policy, the Retain old events Group Policy setting is enabled. An Active Directory security group named "Windows System Administrators" is used to control all files and folders on TT-PRINT01. A Tailspin Toys administrator named Marx has been delegated rights to multiple Organizational Units (OUs) and object in the tailspintoys.com domain. Tailspin Toys developers use Hyper-V Virtual Machines (VM's) for development. There are 10 development VM's named TT-DEV01 to TT-DEV20.
The current Wingtip Toys server topology is shown in the following table: All servers in the Wingtip Toys environment are joined to the wingtiptoys.com domain.

Infrastructure Services
You must ensure that the following infrastructure services requirements are met:
All domain zones must be stored as Active Directory-integrated zones.
Only DNS servers located in the Tailspin Toys main offices may communicate with the DNS servers at Wingtip Toys.
Only DNS servers located in the Wingtip Toys main offices may communicate with the DNS servers at Tailspin Toys
All tailspintoys.com resources must be resolved from the Wingtip Toys offices.
All wingtiptoys.com resources must be resolved from the Tailspin toys offices.
Certificates must be distributed automatically to all Tailspin Toys and Wingtip Toys computers.
Delegated Administration
You must ensure that the following delegated administration requirements are met: Tailspin Toys IT security administrators must be able to create, modify and delete user objects in the wingtip.com domain.
Members of the Domain Admins Group in the tailspintoys.com domain must have full access to the wingtiptoys.com Active Directory environment.
A delegation policy must grant minimum access rights and simplify the process of delegating rights.
Minimum permissions must always be delegated to ensure that the least privilege is granted for a job task.
Members of the TAILSPINTOYS\Helpdesk group must be able to update drivers and add printer ports on TT-PRINT01.
Members of the TAILSPINTOYS\Helpdesk group must not be able to cancel a print job on TT-PRINT01.
Tailspin Toys developers must be able to start, stop and apply snapshots to their development VM's.
IT Security
Server security must be automated to ensure that newly deployed servers automatically have the same security configurations as existing servers.
Auditing must be configured to ensure that the deletion of users objects and OUs is logged.
Microsoft Word and Microsoft Excel files must be automatically encrypted when uploaded to the
Confidential documents library on the Tailspin Toys Microsoft SharePoint site.
Multi factor authentication must control access to Tailspin Toys domain controllers.
All file and folder auditing must capture the reason for access.
All folder auditing must capture all delete actions for all existing folders and newly created folders.
New events must be written to the Security event log in the tailspintoys.com domain and retained
indefinitely.
Drive X:\ on the TT-FILE01 must be encrypted by using Windows BitLocker Drive Encryption and must be automatically unlock.

Your network contains an Active Directory forest named contoso.com.
You plan to deploy a new child domain named branch.contoso.com. The child domain will contain two domain controllers. Both domain controllers will have the DNS Server server role installed. All users and computers in the branch office will be members of the branch.contoso.com domain.
You need to plan the DNS infrastructure for the child domain to meet the following requirements:
Ensure resources in the root domain are accessible by fully qualified domain names.
Ensure resources in the child domain are accessible by fully qualified domain names.
Provide name resolution services in the event that a single server fails for a prolonged period of time.
Automatically recognize when new DNS servers are added to or removed from the contoso.com
domain. What should you include in your plan?