Online Access Free 70-647 Practice Test

Your company has four offices that are connected by using high speed wide area network (WAN) links.
Each office has a router that supports the Simple Certificate Enrollment Protocol (SCEP).
The network consists of one Active Directory domain. All domain controllers run Windows Server 2008. You
have a Certificate Services infrastructure.
The Certificate Services servers run Windows Server 2003 Standard Edition. You plan to enable device
authentication for all routers.
You need to recommend changes to the Certificate Services infrastructure to support device authentication.
Which changes should you recommend?

• A.Install a new server that runs Windows Server 2008 Standard Edition. Install the Network Protection and Access Services (NPAS) role.
• B.Upgrade the existing Certificate Services servers to Windows Server 2008 Enterprise Edition. Enable the Network Device Enrollment service.
• C.Upgrade the existing Certificate Services servers to Windows Server 2008 Standard Edition. Enable the Web enrollment component.
• D.Install a new server that runs Windows Server 2008 Enterprise Edition. Enable the Active Directory Certificate Services (AD CS) role.

Your network consists of two Active Directory forests. The Active Directory forests are configured as shown in the following table:

The contoso.com and fabrikam.com domains each contain one server that runs Active Directory Federation
Services (AD FS).
Users in the company1.contoso.com domain require access to an application server in the
company2.fabrikam.com domain.
The application server is configured to allow only Kerberos authentication.
You need to ensure that users in the company1.contoso.com domain can access the application server in the company2.fabrikam.com domain.
What should you do first?

• A.Create an external trust between the contoso.com domain and the fabrikam.com domain.
• B.Create a forest trust between the contoso.com forest and the fabrikam.com forest.
• C.Create an external trust between the company1.contoso.com domain and the company2.fabrikam.com domain.
• D.Create an AD FS federation trust between the contoso.com forest and the fabrikam.com forest.

A company has a main office and multiple branch offices. The corporate network contains an Active Directory Domain Services (AD DS) domain and servers that run Windows Server 2008 R2.
You plan to deploy 50 read-only domain controllers (RODCs) to the branch offices. You will configure the RODCs at the company's main office and then ship them to the branch offices for installation by on-site technicians.
You have the following requirements:
-Minimize network traffic related to the installation.
-Ensure the security of the RODCs.
You need to create a server configuration plan that meets the requirements.
You use the Ntdsutil command-line utility to prepare an Install From Media (IFM) source, removing any sensitive credentials.
What should you recommend next? (More than one answer choice may achieve the goal. Select the BEST answer.)

• A.Perform a Server Core installation of Windows Server 2008 R2 and add the RODC server role. Run DCPROMO with the /UseExistingAccount: Attach switch.
• B.Install Windows Server 2008 R2 and add the RODC server role. Run DCPROMO with the / ReplicationSourcePath switch and specify the IFM source.
• C.Perform a Server Core installation of Windows Server 2008 R2 and add the RODC server role. Run DCPROMO and specify an answer file that includes the IFM location.
• D.Install Windows Server 2008 R2 and add the RODC server role. Run DCPROMO and specify an answer file that includes the IFM location.

Your company has 50 offices. Twenty offices are in North America and 30 offices are in Europe. An Active Directory site exists for each office.
The network consists of one Active directory domain. All domain controllers run Windows Server 2008. You use a domain-level Group Policy object (GPO) to install an application named App1 on all client computers.
You need to deploy a GPO solution to meet the following requirements:
Maintain all settings applied by the existing GPOs.
Deploy shared printers based on computer location.
What should you do?

• A.Install a child domain for Europe and a child domain for North America. Create and link a GPO to each domain to deploy the printers.
• B.Create and link a GPO to each site to deploy the printers.
• C.Create a new organizational unit (OU) for Europe and a new OU for North America. Create and link the GPO to each new OU to deploy the printers.
• D.Create and link the GPO to the domain to deploy the printers.

Your network consists of one Active Directory domain. The domain contains servers that run Windows Server 2008 R2. The relevant servers are configured as shown in the following table.

Your company has a department named Sales. Al client computers in the Sales department run Windows 7
and use an application named Application1. Application1 uses a dynamic-link library (DLL.) named
Salesapp.dll..
You plan to deploy a new application named Apphcation2 that uses a different version of Salesapp.dll.
During testing, administrators report that Application2 causes Application1 to fail when both applications run
on the same computer.
You need to ensure that users can run both applications successfully on the same computer.
What should you do?

• A.On Server1, create and link a Group Policy object (GPO) that publishes Appcation2 to all users in the Sales department.
• B.On Server2, install Application1 and Applcation2. Configure all computers in the Sales department to run the applications by using RemoteApp.
• C.On Server1, create and link a Group Policy object (GPO) that assigns Application2 to all computers in the Sales department.
• D.On Server2, install Application2 and configure all computers in the Sales department to run the application by using RemoteApp.