MCITPMCITP(70-646)章节练习(2018.07.26)

Your company has a main office and three branch offices. The network consists of a single Active  
Directory domain. Each office contains an Active Directory domain controller. You need to create a DNS  
infrastructure for the network that meets the following requirements：  
èThe DNS infrastructure must allow the client computers in each office to register DNS names within their. 
respective offices.   
èThe client computers must be able to resolve names for hosts in all offices.
What should you do？（）

Your network consists of a single Active Directory domain. The domain contains three organizational units （OUs） named Test， Application， and Database.  
You need to redesign the layout of the OUs to support the following requirements：  
èPrevent Group Policy objects（GPOs） that are linked to the domain from applying to computerslocated in the Applications OU  
èMinimize the number of GPOs
èMinimize the number of OUs
What should you include in your design？（）

Your company has a main office and two branch offices. The main office is located in London. The branch offices are located in New York and Paris. Your network consists of an Active Directory forest that contains three domains named contoso.com， paris.contoso.com， and newyork.contoso.com. All domain controllers run Windows Server 2008 R2 and have the DNS Server server role installed.  
The domain controllers for contoso.com are located in the London office. The domain controllers for paris.contoso.com are located in the Paris office. The domain controllers for newyork.contoso.com are located in the New York office.  
A domain controller in the contoso.com domain has a standard primary DNS zone for contoso.com. Adomain controller in the paris.contoso.com domain has a standard primary DNS zone for paris.contoso.com. A domain controller in the newyork.contoso.com domain has a standard primary DNS zone for newyork.contoso.com.  
You need to plan a name resolution strategy for the Paris office that meets the following requirements：  
èIf a WAN link fails， clients must be able to resolve hostnames for contoso.com.  
èIf a WAN link fails， clients must be able to resolve hostnames for newyork.contoso.com.  
èThe DNS servers in Paris must be updated when new authoritative DNS servers are added tonewyork.contoso.com.  
What should you include in your plan？（）

Your network is configured as shown in the following diagram.You deploy an enterprise certification authority （CA） on the internal network. You also deploy a Microsoft  
Online Responder on the internal network.  
You need to recommend a secure method for Internet users to verify the validity of individual certificates.  
The solution must minimize network bandwidth.
What should you recommend？（）

Your company has 250 branch offices.  
Your network contains an Active Directory domain. The domain controllers run Windows Server 2008 R2.  
You plan to deploy Read-only Domain Controllers （RODCs） in the branch offices.
You need to plan the deployment of the RODCs to meet the following requirements：
èBuild each RODC at the designated branch office.  
èEnsure that the RODC installation source files do not contain cached secrets.  
èMinimize the bandwidth used during the initial synchronization of Active Directory Domain Services （AD？DS）.  
What should you include in your plan？（）

Your network consists of a single Active Directory domain. The network contains five Windows Server 2008 R2 servers that host Web applications. You need to plan a remote management strategy to manage the Web servers. 
Your plan must meet the following requirements：
èAllow Web developers to configure features on the Web sites  
èPrevent Web developers from having full administrative rights on the Web servers
What should you include in your plan？（）

Your network consists of a single Active Directory domain. The relevant portion of the Active Directory domain is configured as shown in the following diagram. The Staff organizational unit （OU） contains all user accounts except for the managers user accounts. The Managers OU contains the managers user accounts and the following global groups   
èSales
èFinance
èEngineering  
You create a new Group Policy object （GPO） named GPO1， and then link it to the Employees OU.
Users from the Engineering global group report that they are unable to access the Run commandon the Start menu. You discover that the GPO1 settings are causing the issue.  
You need to ensure that the users from the Engineering global group are able to access the Run  command on the Start menu.
What should you do？（）

Your network contains a single Active Directory site.  
You plan to deploy 1，000 new computers that will run Windows 7 Enterprise. The new computers have Pre-boot Execution Environment （PXE） network adapters.  
You need to plan the deployment of the new computers to meet the following requirements： 
èSupport 50 simultaneous installations of Windows 7  
èMinimize the impact of network operations during the deployment of the new computers  
èMinimize the amount of time required to install Windows 7 on the new computers
What should you include in your plan？（）

Your network consists of a single Active Directory forest. The forest functional level is Windows Server 2008 R2. The forest contains two domains named contoso.com and na.contoso.com.  
Contoso.com contains a user named User1. Na.contoso.com contains an organizational unit （OU） named  Security.  
You need to give User1 administrative rights so that he can manage Group Policies for the Security OU.  
You want to achieve this goal while meeting the following requirements：  
èUser1 must be able to create and configure Group Policies in na.contoso.com.
èUser1 must be able to link Group Policies to the Security OU.  
èUser1 must be granted the least administrative rights necessary to achieve the goal.
What should you do？（）

Your network consists of a single Active Directory domain. The network includes a branch officenamed Branch1. Branch1 contains 50 member servers that run Windows Server 2008 R2. An  organizational unit （OU） named Branch1-Servers contains the computer objects for the servers in  Branch1. A global group named Branch1-admins contains the user accounts for the administrators.  Administrators maintain all member servers in Branch1. You need to recommend a solution that allows the members of Branch1？admins group to perform the following tasks on the Branch1 member servers.  
èStop and start services 
èChange registry settings  
What should you recommend？（）