Microsoft Windows Server 2008,Enterprise Administrator Sample Questions:

1. Your company has three offices. Each office is configured as an Active Directory site. The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 R2. The company has five departments. You use a domain-level Group Policy object (GPO) to install Microsoft Office on all client computers.
You need to deploy a GPO strategy to meet the following requirements:
* Install a custom application in one of the departments.
* Restrict access to removable storage devices for all users.
* Implement separate Windows Internet Explorer proxy settings for each physical location.
What should you do?

A) Create a new organizational unit (OU) for each department. Create a new GPO for each site and a new GPO for the domain. Create a GPO for one department OU and use the GPO to install the application.
B) Create a new child domain for each department. Create a new GPO for each site and a new GPO for each new child domain. Create a single GPO for all the new child domains and use the GPO to install the custom application.
C) Create a new group for each department. Create a new GPO for each site. Create a new GPO for the domain and use the GPO to install the custom application.
D) Create a new organizational unit (OU) for each department. Create a single GPO for all the sites and a new GPO for the domain. Create a single GPO for each department OU and use the GPO to install the custom application.

2. Your company has a main office and 10 branch offices. The network consists of one Active Directory
domain.
All domain controllers run Windows Server 2008 and are located in the main office.
You plan to deploy one Windows Server 2008 domain controller in each branch office.
You are concerned that the branch offices will fail to provide adequate security for the new domain
controllers.
You need to recommend a security solution to meet the following requirements:
-Prevent any unauthorized user from accessing user passwords when the server is running.
-Prevent any unauthorized user from accessing user passwords either locally or over the network on each branch office domain controller.
Which configuration should you recommend for each branch office domain controller?

A) Enable Windows Firewall.
B) Enable the read-only domain controller (RODC) option.
C) Enable an IPsec policy.
D) Enable Windows BitLocker Drive Encryption (BitLocker).

3. You work as an IT professional in an international company which is named Contoso. Your major job is to translate business goals into technology decisions and plan mid-range to long-term strategies. And you are experienced in network infrastructure, security policy and business continuity. In your company, you are responsible for infrastructure design and global configuration changes.
One Active Directory domain is contained by your network. There are Three hundred client computers and 1,000 client computers. Windows XP Service Pack 2 (SP2) is run by the three hundred client computers and Windows Vista is run by 1,000 client computers. You want to have Terminal Services deployed on new servers, and Windows Server 2008 will be run by new servers.
Since you are the technical support, you are required to design the deployment of Terminal Services RemoteApp (TS RemoteApp). Which option should be included in your design?

A) A Group Policy object (GPO) should be Created and linked to the Active Directory domain. And then, the GPO should be changed to enable access through Terminal Services Gateway (TS Gateway).
B) In the Active Directory domain, all user accounts should be added to the Remote Desktop Users built-in local group.
C) On all computers which Windows XP is run, the Remote Desktop Connection 6.0 client update should be installed.
D) On the Terminal Servers, all user accounts should be added to the Remote Desktop Users local group.

4. Your network consists of one Active Directory domain. All domain controllers run Windows Server 2008 R2.
You need to deploy Active Directory Certificate Services on the network to support the following requirements:
* Maintain availability if a single server fails.
* Delegate the enrollment of certificates for separate groups of users,
* Restrict the types of certificates that can be issued by a certificate manager.
What should you do?

A) Deploy two servers that run Windows Server 2008 R2 Standard. Configure a standalone root certification authority (CA) and an enterprise subordinate CA.
B) Deploy two servers that run Windows Server 2008 R2 Enterprise. Configure a failover cluster.Configure a standalone root certification authority (CA).
C) Deploy two servers that run Windows Server 2008 R2 Enterprise. Configure an enterprise root certification authority (CA) and a standalone subordinate CA.
D) Deploy two servers that run Windows Server 2008 R2 Enterprise. Configure a failover cluster.Configure an enterprise certification authority (CA).

5. You network consists of one Active Directory forest named Contoso.com
The relevant portion of the network is configured as shown in the exhibit. (Click the Exhibit button.)
Users in the sales.apac.intl.Contoso.com domain frequently access resources on the
products.corp.Contoso.com domain.
Users reports slow access times when users access resources on the products.corp.Contoso.com domain.
You need to minimize access times when users access resources on the products.corp.Contoso.com
domain.
What should you do? Exhibit:

A) Create a realm trust.
B) Enable Universal Group Membership Caching for all Active Directory sites.
C) Create a shortcut trust.
D) Create a new DNS application partition. Add the Contoso.com zone to the application partition.

Solutions: