Your network contains a stand-alone root certification authority （CA）. You have a server named Server1 that runs Windows Server 2008 R2. 
You issue a server certificate to Server1. You deploy Secure Socket Tunneling Protocol （SSTP） on Server1.  
You need to recommend a solution that allows external partner computers to access internalnetwork resources by using SSTP.  
What should you recommend？（）

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2.
A server named Server1 has the Remote Desktop Services server role installed.  
You notice that several users consume more than 30 percent of the CPU resources throughout the day.
You need to prevent users from consuming more than 15 percent of the CPU resources. Administrators must not be limited by the amount of CPU resources that they can consume.
What should you do？（）

Your network consists of a single Active Directory forest. The sales department in your company has 600 Windows Server 2008 R2 servers. You need to recommend a solution to monitor the performance of the 600 servers.
Your solution must meet the following requirements：  
èGenerate alerts when the average processor usage is higher than 90 percent for 20 minutes.  
èAutomatically adjust the processor monitoring threshold to allow for temporary changes in the workload.  
What should you recommend？（）

You need to design a Windows Server Update Services （WSUS） infrastructure that meets the  following requirements：  
èThe updates must be distributed from a central location.  
èAll computers must continue to receive updates in the event that a server fails.
What should you include in your design？（）

Your company has a branch office that contains a Windows Server 2008 R2 server. The server runs Windows Server Update Services （WSUS）.  
The company opens four new satellite offices. Each satellite office connects to the branch office by using a dedicated WAN link.
You need to design a strategy for patch management that meets the following  requirements：  
èWSUS updates are approved from a central location.  
èWAN traffic is minimized between the branch office and the satellite offices.
What should you include in your design？（）

Your network contains several Windows Server 2008 R2 servers that run Windows Server Update  
Services (WSUS). The WSUS servers distribute updates to all computers on the internal network. Remote users connect from their personal computers to the internal network by using a split-tunnel VPN  connection.  
You need to plan a strategy for patch management that deploys updates on the remote users coputers.  
Your strategy must meet the following requirements:
èMinimize bandwidth use over the VPN connections.  
èRequire updates to be approved on the WSUS servers before they are installed on the client computers.
What should you include in your plan?（）

Your company has a branch office that contains a Windows Server 2008 R2 computer. The Windows  
Server 2008 R2 computer runs Windows Server Update Services （WSUS）. The WSUS server is  configured to store updates locally.  The company opens four new satellite offices. Each satellite office connects to the branch office by using  a dedicated WAN link. Internet access is provided through the branch office.  
You need to design a strategy for patch management that meets the following requirements：  
èWSUS updates are approved independently for each satellite office.
èInternet traffic is minimized.  
What should you include in your design？（）

Your network consists of three Active Directory forests. Forest trust relationships exist between all forests. Each forest contains one domain. All domain controllers run Windows Server 2008 R2. Your company has three network administrators. Each network administrator manages a forest and the Group Policy objects （GPOs） within that forest.  
You need to create standard GPOs that the network administrators in each forest will use. The GPOs must meet the following requirements：  
èThe GPOs must only contain settings for either user configurations or computer configurations.
èThe number of GPOs must be minimized.  
Which two actions should you perform？（）

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2.  
You need to recommend a Group Policy deployment strategy. Your strategy must support the following  requirements：
èDomain-level Group Policy objects （GPOs） must not be overwritten by organizational unit （OU） level  GPOs.  
èOU-level GPOs must not apply to members of the Server Operators group.
What should you recommend？（）
 

Your network consists of a single Active Directory domain. The relevant portion of the Active Directory domain is configured as shown in the following diagram. The Staff organizational unit （OU） contains all user accounts except for the managers user accounts. The Managers OU contains the managers user accounts and the following global groups   
èSales
èFinance
èEngineering  
You create a new Group Policy object （GPO） named GPO1， and then link it to the Employees OU.
Users from the Engineering global group report that they are unable to access the Run commandon the Start menu. You discover that the GPO1 settings are causing the issue.  
You need to ensure that the users from the Engineering global group are able to access the Run  command on the Start menu.
What should you do？（）

Your network consists of a single Active Directory domain. The domain contains three organizational units （OUs） named Test， Application， and Database.  
You need to redesign the layout of the OUs to support the following requirements：  
èPrevent Group Policy objects（GPOs） that are linked to the domain from applying to computerslocated in the Applications OU  
èMinimize the number of GPOs
èMinimize the number of OUs
What should you include in your design？（）