Microsoft 070-647 Actual Free Exam Questions & Community Discussion

The AD CS servers must meet the following requirements:
-Install all management components on the server.
-Manage the server from the server console.
You need to recommend the editions of Windows Server 2008 R2 that meet the
requirements for
the new AD CS server.
Which editions should you recommend? (Each correct answer presents a complete
solution.
Choose three.)

Your network contains 200 Web servers that run Windows Server 2008.
You need to plan the management of security settings for all servers on the network.
The solution must meet the following requirements:
-Minimize administrative effort.
-Maintain identical security settings for all servers.
-Enable compliance audits of servers added to the network. What should you do first?

DRAG DROP
A company has retail locations throughout the United States. You are planning the deployment of a server for each retail location. You will prepare the servers at the main data center and ship them to the retail locations. You will deploy a custom application and an Active Directory Domain Services (AD DS) role on each server.
Each server must meet the following security requirements:
-All application data must be encrypted on the local hard drive.
-All application data must be encrypted when communicating with users.
-AD DS accounts on the computer must be easily managed in case of security violations.
You need to plan the server deployment.
Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order. (Use only actions that apply.)
Select and Place:

Your company has a main office and two branch offices. The network contains one Active Directory domain named contoso.com. All domain controllers and DNS servers for the contoso.com domain are located in the main office. All DNS servers are member servers.
You plan to deploy two new Active Directory domains named east.contoso.com and west.contoso.com in the branch offices.
You install a DNS server in each branch office.
You need to prepare the environment for the installation of the new domains.
What should you do next?

You are evaluating implementing a solution for the internal auditors.
You need to recommend a solution to delegate the appropriate rights to the auditors.
What should you include in the recommendation?

You are evaluating the deployment of a separate Active Directory site in each office.
You need to recommend changes to the Active Directory Infrastructure to support the new sites.
What should you include in the recommendation?

Your network consists of one Active Directory domain that contains two servers named Server1 and
Server2 that run Windows Server 2008.
Server1 runs Active Directory Certificate Services (AD CS) and is configured as an enterprise root
certification authority (CA).
Server1 is only accessible from the internal network.
Server1 issues certificates to both internal and external client computers that run Windows Vista.
Server2 is configured as a Web server. Server2 is located in the perimeter network and is only accessible
through HTTP.
The network is configured as shown in the following diagram: You need to recommend an e-mail security solution for all Windows Vista client computers that meets the following requirements:

-Users must only request status information for individual certificates.
-Users must be notified when they attempt to send a secure e-mail message to a user that has an expired certificate.
What should you recommend?

Your network consists of an Active Directory forest that contains only domain controllers that run Windows Server 2003.
You need to prepare the environment for the implementation of a new Windows Server 2008 domain in the forest.
What should you do?

Your company has one main office and 10 branch offices.
The network contains servers that run Windows Server 2008. The servers are configured as file servers
and are located in the branch office.
You need to plan a security policy for the branch office.
The policy must meet the following requirements:
-Users must be able to access all files on the servers.
-The operating system and the files on the servers must be inaccessible if a server is stolen.
What should you include in your plan?

Your network consists of one Active Directory domain. All domain controllers run either Windows Server 2008 R2 or Windows Server 2003 SP2. A custom application stores passwords in Active Directory. You plan to deploy read-only domain controllers (RODCs) on the network.
You need to prevent custom application passwords from being replicated to the RODCs.
What should you do?

You need to recommend the number of Active Directory sites and subnet objects that must be configured to meet the company's technical requirements.
What should you recommend?