Page: 1
/ 23
Total 337 questions
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Contoso, Ltd., is a software development company. Contoso has a main office in London and two branch offices, one in Madrid and the other in Dublin. The company is in the process of adopting Microsoft Azure to host business critical resources and applications.
Contoso has an Active Directory Domain Services (AD DS) domain named contoso.com. All devices in the three offices are members of the domain. Each office has a dedicated organizational unit (OU) in the root of the domain named London, Madrid, and Dublin, respectively. Each office OU has three child OUs named
Computers, Users, and Groups.
The local Administrator account is disabled on all client devices in the domain by using a Group Policy object (GPO) named SecurityConfiguration that is linked to the root of the domain. Contoso's security department also has a GPO named WSUSConfiguration. WSUSConfiguration defines the configuration of Windows
Update Services on the Windows Server Update Services (WSUS) server named WSUS1.
You have a GPO named RemoteSales that uses a WMI filter. The GPO prevents users from launching applications that are not approved.
DNS Services -
Contoso uses a DNS service that is installed on two domain controllers in the main office. The domain controllers are named DO and DC2. Both DC1 and DC2 run
Windows Server 2008 R2. Both domain controllers host Active Directory integrated zones named contoso.com and lab.contoso.com. The zones are configured to allow only secure updates.
A standalone server named DNSSrv1 is located in the Madrid office, DNSSrv1 runs Microsoft Windows Server 2012 R2 with DNS Server role installed.
Research -
Contoso creates a new research department to develop integration between Contoso's software and public cloud services.
Finance Department -
Users in the finance department use a client-server application named App1. App1 uses custom Active Directory attributes to store encryption keys. App1 is a business critical application that must be migrated to Microsoft Azure.
A server named SERVER2 hosts App1. SERVER2 runs Windows Server 2008 R2. The disk configuration for SERVER2 is shown in the following table:
A server named SERVER1 hosts a database that is used by Appl. SERVER1 runs Windows Server 2008 R2 and SQL Server 2008 R2. The disk configuration for
SERVER1 is shown in the following table:
The Contoso management team plans to increase the use of App1. To accommodate these plans, the size of the database must be increased.
Sales Department -
Users in the sales department use laptop computers when they travel. Salespeople use a legacy application named ContosoSales on their laptop computers.
Salespeople can use a pool of shared desktop computers in each office.
The ContosoSales app is dependent on a specific registry key that is frequently overwritten by third-party applications. This causes the ContosoSales app to stop working.
Business Requirements -
All DNS servers must be placed in a physically secure location.
Software development department -
All software developers must migrate their servers and workstations to the DNS domain lab.contoso.com to ensure that frequent changes to DNS do not interfere with the production environment.
Finance department -
All servers that host App1 must be migrated to Microsoft Azure. A new Azure virtual machine (VM) named CL0UD2 must be deployed to Microsoft Azure.
Sales department -
Users in the sales department should not be able to run applications on their laptop computers that are not approved by the security department. Users in the sales department should have no such restrictions while they work on the desktop computers in the office.
Technical Requirements -
App1 requirements -
You have the following requirements:
The size of the database for App1 must be increased to 8 TB.
The encryption keys for App1 should not be replicated to the offices where physical server security is not guaranteed.
The amount of disk space that is used by Microsoft Azure must be minimized.
Infrastructure requirements -
You have the following requirements:
The lab.contoso.com DNS domain zone must not be replicated or transferred to DNS servers outside of the London office.
A new DNS domain zone named research.contoso.com must be deployed for users in the research department.
The research.contoso.com DNS domain zone must be protected by using DNS Security Extensions {DNSSEC).
All computers in the London and Madrid offices must install Windows Updates from the server WSUS1.
A new domain controller for the contoso.com domain must be deployed in the Madrid office.
Replication traffic must be minimized when the new domain controllers are deployed.
New WMI filters must not conflict with existing WMI filters.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to configure the Group Policy for salespeople.
Solution: You create a domain security group named SalesDevices and add all client devices to this group. You also create one Group Policy object (GPO) that has an AppLocker policy rule that applies to SalesDevices. You link the GPO to the root of the domain.
Does this meet the goal?
- A. Yes
- B. No
Answer : B
Explanation:
The GPO should not apply to the desktop computers.
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Contoso, Ltd., is a software development company. Contoso has a main office in London and two branch offices, one in Madrid and the other in Dublin. The company is in the process of adopting Microsoft Azure to host business critical resources and applications.
Contoso has an Active Directory Domain Services (AD DS) domain named contoso.com. All devices in the three offices are members of the domain. Each office has a dedicated organizational unit (OU) in the root of the domain named London, Madrid, and Dublin, respectively. Each office OU has three child OUs named
Computers, Users, and Groups.
The local Administrator account is disabled on all client devices in the domain by using a Group Policy object (GPO) named SecurityConfiguration that is linked to the root of the domain. Contoso's security department also has a GPO named WSUSConfiguration. WSUSConfiguration defines the configuration of Windows
Update Services on the Windows Server Update Services (WSUS) server named WSUS1.
You have a GPO named RemoteSales that uses a WMI filter. The GPO prevents users from launching applications that are not approved.
DNS Services -
Contoso uses a DNS service that is installed on two domain controllers in the main office. The domain controllers are named DO and DC2. Both DC1 and DC2 run
Windows Server 2008 R2. Both domain controllers host Active Directory integrated zones named contoso.com and lab.contoso.com. The zones are configured to allow only secure updates.
A standalone server named DNSSrv1 is located in the Madrid office, DNSSrv1 runs Microsoft Windows Server 2012 R2 with DNS Server role installed.
Research -
Contoso creates a new research department to develop integration between Contoso's software and public cloud services.
Finance Department -
Users in the finance department use a client-server application named App1. App1 uses custom Active Directory attributes to store encryption keys. App1 is a business critical application that must be migrated to Microsoft Azure.
A server named SERVER2 hosts App1. SERVER2 runs Windows Server 2008 R2. The disk configuration for SERVER2 is shown in the following table:
A server named SERVER1 hosts a database that is used by Appl. SERVER1 runs Windows Server 2008 R2 and SQL Server 2008 R2. The disk configuration for
SERVER1 is shown in the following table:
The Contoso management team plans to increase the use of App1. To accommodate these plans, the size of the database must be increased.
Sales Department -
Users in the sales department use laptop computers when they travel. Salespeople use a legacy application named ContosoSales on their laptop computers.
Salespeople can use a pool of shared desktop computers in each office.
The ContosoSales app is dependent on a specific registry key that is frequently overwritten by third-party applications. This causes the ContosoSales app to stop working.
Business Requirements -
All DNS servers must be placed in a physically secure location.
Software development department -
All software developers must migrate their servers and workstations to the DNS domain lab.contoso.com to ensure that frequent changes to DNS do not interfere with the production environment.
Finance department -
All servers that host App1 must be migrated to Microsoft Azure. A new Azure virtual machine (VM) named CL0UD2 must be deployed to Microsoft Azure.
Sales department -
Users in the sales department should not be able to run applications on their laptop computers that are not approved by the security department. Users in the sales department should have no such restrictions while they work on the desktop computers in the office.
Technical Requirements -
App1 requirements -
You have the following requirements:
The size of the database for App1 must be increased to 8 TB.
The encryption keys for App1 should not be replicated to the offices where physical server security is not guaranteed.
The amount of disk space that is used by Microsoft Azure must be minimized.
Infrastructure requirements -
You have the following requirements:
The lab.contoso.com DNS domain zone must not be replicated or transferred to DNS servers outside of the London office.
A new DNS domain zone named research.contoso.com must be deployed for users in the research department.
The research.contoso.com DNS domain zone must be protected by using DNS Security Extensions {DNSSEC).
All computers in the London and Madrid offices must install Windows Updates from the server WSUS1.
A new domain controller for the contoso.com domain must be deployed in the Madrid office.
Replication traffic must be minimized when the new domain controllers are deployed.
New WMI filters must not conflict with existing WMI filters.
You need to configure the Group Policy for salespeople.
What should you do?
- A. Create a domain security group named SalesDevices and add all client devices to this group. Create one Group Policy object (GPO) that has an AppLocker policy rule that applies to SalesDevices and then link the GPO to the root of the domain.
- B. Move all shared desktops to a separate organizational unit (OU). Create one Group Policy object (GPO) that has an AppLocker policy rule and then enable loopback policy processing within the GPO. Link the GPO to the new OU.
- C. Create one Group Policy object (GPO) that uses AppLocker, and link the GPO to the root of the domain. Modify GPO security filtering to allow only the Sales department computers to read and apply the GPO, and then create a WMI filter that applies only to laptop computers and associate the filter with the GPO.
- D. Create a Group Policy Object (GPO) with an AppLocker policy and then link the GPO to the Computers OU for each location.
Answer : C
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Contoso, Ltd., is a software development company. Contoso has a main office in London and two branch offices, one in Madrid and the other in Dublin. The company is in the process of adopting Microsoft Azure to host business critical resources and applications.
Contoso has an Active Directory Domain Services (AD DS) domain named contoso.com. All devices in the three offices are members of the domain. Each office has a dedicated organizational unit (OU) in the root of the domain named London, Madrid, and Dublin, respectively. Each office OU has three child OUs named
Computers, Users, and Groups.
The local Administrator account is disabled on all client devices in the domain by using a Group Policy object (GPO) named SecurityConfiguration that is linked to the root of the domain. Contoso's security department also has a GPO named WSUSConfiguration. WSUSConfiguration defines the configuration of Windows
Update Services on the Windows Server Update Services (WSUS) server named WSUS1.
You have a GPO named RemoteSales that uses a WMI filter. The GPO prevents users from launching applications that are not approved.
DNS Services -
Contoso uses a DNS service that is installed on two domain controllers in the main office. The domain controllers are named DO and DC2. Both DC1 and DC2 run
Windows Server 2008 R2. Both domain controllers host Active Directory integrated zones named contoso.com and lab.contoso.com. The zones are configured to allow only secure updates.
A standalone server named DNSSrv1 is located in the Madrid office, DNSSrv1 runs Microsoft Windows Server 2012 R2 with DNS Server role installed.
Research -
Contoso creates a new research department to develop integration between Contoso's software and public cloud services.
Finance Department -
Users in the finance department use a client-server application named App1. App1 uses custom Active Directory attributes to store encryption keys. App1 is a business critical application that must be migrated to Microsoft Azure.
A server named SERVER2 hosts App1. SERVER2 runs Windows Server 2008 R2. The disk configuration for SERVER2 is shown in the following table:
A server named SERVER1 hosts a database that is used by Appl. SERVER1 runs Windows Server 2008 R2 and SQL Server 2008 R2. The disk configuration for
SERVER1 is shown in the following table:
The Contoso management team plans to increase the use of App1. To accommodate these plans, the size of the database must be increased.
Sales Department -
Users in the sales department use laptop computers when they travel. Salespeople use a legacy application named ContosoSales on their laptop computers.
Salespeople can use a pool of shared desktop computers in each office.
The ContosoSales app is dependent on a specific registry key that is frequently overwritten by third-party applications. This causes the ContosoSales app to stop working.
Business Requirements -
All DNS servers must be placed in a physically secure location.
Software development department -
All software developers must migrate their servers and workstations to the DNS domain lab.contoso.com to ensure that frequent changes to DNS do not interfere with the production environment.
Finance department -
All servers that host App1 must be migrated to Microsoft Azure. A new Azure virtual machine (VM) named CL0UD2 must be deployed to Microsoft Azure.
Sales department -
Users in the sales department should not be able to run applications on their laptop computers that are not approved by the security department. Users in the sales department should have no such restrictions while they work on the desktop computers in the office.
Technical Requirements -
App1 requirements -
You have the following requirements:
The size of the database for App1 must be increased to 8 TB.
The encryption keys for App1 should not be replicated to the offices where physical server security is not guaranteed.
The amount of disk space that is used by Microsoft Azure must be minimized.
Infrastructure requirements -
You have the following requirements:
The lab.contoso.com DNS domain zone must not be replicated or transferred to DNS servers outside of the London office.
A new DNS domain zone named research.contoso.com must be deployed for users in the research department.
The research.contoso.com DNS domain zone must be protected by using DNS Security Extensions {DNSSEC).
All computers in the London and Madrid offices must install Windows Updates from the server WSUS1.
A new domain controller for the contoso.com domain must be deployed in the Madrid office.
Replication traffic must be minimized when the new domain controllers are deployed.
New WMI filters must not conflict with existing WMI filters.
You need to plan the migration of App1.
What should you do?
- A. Install App1 on drive C. Move all of the data that supports App1 to drive D.
- B. Expand the size of drive C Install App1 and all of the data that supports the app on drive C
- C. Install App1 on drive D. Move all of the data that supports App1 to an additional data drive.
- D. Install App1 on drive C. Move all of the data that supports App1 to an additional data drive.
Answer : B
Best practice would suggest that Answer C is correct. However, the only requirement that relates to this question is, ג€The amount of disk space that is used by
Microsoft Azure must be minimized.ג€ Therefore, the answer must be B. This is the only solution that eliminates the unused space on the three existing disks.
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Contoso, Ltd., is a software development company. Contoso has a main office in London and two branch offices, one in Madrid and the other in Dublin. The company is in the process of adopting Microsoft Azure to host business critical resources and applications.
Contoso has an Active Directory Domain Services (AD DS) domain named contoso.com. All devices in the three offices are members of the domain. Each office has a dedicated organizational unit (OU) in the root of the domain named London, Madrid, and Dublin, respectively. Each office OU has three child OUs named
Computers, Users, and Groups.
The local Administrator account is disabled on all client devices in the domain by using a Group Policy object (GPO) named SecurityConfiguration that is linked to the root of the domain. Contoso's security department also has a GPO named WSUSConfiguration. WSUSConfiguration defines the configuration of Windows
Update Services on the Windows Server Update Services (WSUS) server named WSUS1.
You have a GPO named RemoteSales that uses a WMI filter. The GPO prevents users from launching applications that are not approved.
DNS Services -
Contoso uses a DNS service that is installed on two domain controllers in the main office. The domain controllers are named DO and DC2. Both DC1 and DC2 run
Windows Server 2008 R2. Both domain controllers host Active Directory integrated zones named contoso.com and lab.contoso.com. The zones are configured to allow only secure updates.
A standalone server named DNSSrv1 is located in the Madrid office, DNSSrv1 runs Microsoft Windows Server 2012 R2 with DNS Server role installed.
Research -
Contoso creates a new research department to develop integration between Contoso's software and public cloud services.
Finance Department -
Users in the finance department use a client-server application named App1. App1 uses custom Active Directory attributes to store encryption keys. App1 is a business critical application that must be migrated to Microsoft Azure.
A server named SERVER2 hosts App1. SERVER2 runs Windows Server 2008 R2. The disk configuration for SERVER2 is shown in the following table:
A server named SERVER1 hosts a database that is used by Appl. SERVER1 runs Windows Server 2008 R2 and SQL Server 2008 R2. The disk configuration for
SERVER1 is shown in the following table:
The Contoso management team plans to increase the use of App1. To accommodate these plans, the size of the database must be increased.
Sales Department -
Users in the sales department use laptop computers when they travel. Salespeople use a legacy application named ContosoSales on their laptop computers.
Salespeople can use a pool of shared desktop computers in each office.
The ContosoSales app is dependent on a specific registry key that is frequently overwritten by third-party applications. This causes the ContosoSales app to stop working.
Business Requirements -
All DNS servers must be placed in a physically secure location.
Software development department -
All software developers must migrate their servers and workstations to the DNS domain lab.contoso.com to ensure that frequent changes to DNS do not interfere with the production environment.
Finance department -
All servers that host App1 must be migrated to Microsoft Azure. A new Azure virtual machine (VM) named CL0UD2 must be deployed to Microsoft Azure.
Sales department -
Users in the sales department should not be able to run applications on their laptop computers that are not approved by the security department. Users in the sales department should have no such restrictions while they work on the desktop computers in the office.
Technical Requirements -
App1 requirements -
You have the following requirements:
The size of the database for App1 must be increased to 8 TB.
The encryption keys for App1 should not be replicated to the offices where physical server security is not guaranteed.
The amount of disk space that is used by Microsoft Azure must be minimized.
Infrastructure requirements -
You have the following requirements:
The lab.contoso.com DNS domain zone must not be replicated or transferred to DNS servers outside of the London office.
A new DNS domain zone named research.contoso.com must be deployed for users in the research department.
The research.contoso.com DNS domain zone must be protected by using DNS Security Extensions {DNSSEC).
All computers in the London and Madrid offices must install Windows Updates from the server WSUS1.
A new domain controller for the contoso.com domain must be deployed in the Madrid office.
Replication traffic must be minimized when the new domain controllers are deployed.
New WMI filters must not conflict with existing WMI filters.
HOTSPOT -
You need to configure Windows Updates.
How should you complete the relevant Windows PowerShell commands? To answer, select the Windows PowerShell segments in the answer area.
Hot Area:
Answer :
Reference:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731076(v=ws.11)?redirectedfrom=MSDN
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Contoso, Ltd., is a software development company. Contoso has a main office in London and two branch offices, one in Madrid and the other in Dublin. The company is in the process of adopting Microsoft Azure to host business critical resources and applications.
Contoso has an Active Directory Domain Services (AD DS) domain named contoso.com. All devices in the three offices are members of the domain. Each office has a dedicated organizational unit (OU) in the root of the domain named London, Madrid, and Dublin, respectively. Each office OU has three child OUs named
Computers, Users, and Groups.
The local Administrator account is disabled on all client devices in the domain by using a Group Policy object (GPO) named SecurityConfiguration that is linked to the root of the domain. Contoso's security department also has a GPO named WSUSConfiguration. WSUSConfiguration defines the configuration of Windows
Update Services on the Windows Server Update Services (WSUS) server named WSUS1.
You have a GPO named RemoteSales that uses a WMI filter. The GPO prevents users from launching applications that are not approved.
DNS Services -
Contoso uses a DNS service that is installed on two domain controllers in the main office. The domain controllers are named DO and DC2. Both DC1 and DC2 run
Windows Server 2008 R2. Both domain controllers host Active Directory integrated zones named contoso.com and lab.contoso.com. The zones are configured to allow only secure updates.
A standalone server named DNSSrv1 is located in the Madrid office, DNSSrv1 runs Microsoft Windows Server 2012 R2 with DNS Server role installed.
Research -
Contoso creates a new research department to develop integration between Contoso's software and public cloud services.
Finance Department -
Users in the finance department use a client-server application named App1. App1 uses custom Active Directory attributes to store encryption keys. App1 is a business critical application that must be migrated to Microsoft Azure.
A server named SERVER2 hosts App1. SERVER2 runs Windows Server 2008 R2. The disk configuration for SERVER2 is shown in the following table:
A server named SERVER1 hosts a database that is used by Appl. SERVER1 runs Windows Server 2008 R2 and SQL Server 2008 R2. The disk configuration for
SERVER1 is shown in the following table:
The Contoso management team plans to increase the use of App1. To accommodate these plans, the size of the database must be increased.
Sales Department -
Users in the sales department use laptop computers when they travel. Salespeople use a legacy application named ContosoSales on their laptop computers.
Salespeople can use a pool of shared desktop computers in each office.
The ContosoSales app is dependent on a specific registry key that is frequently overwritten by third-party applications. This causes the ContosoSales app to stop working.
Business Requirements -
All DNS servers must be placed in a physically secure location.
Software development department -
All software developers must migrate their servers and workstations to the DNS domain lab.contoso.com to ensure that frequent changes to DNS do not interfere with the production environment.
Finance department -
All servers that host App1 must be migrated to Microsoft Azure. A new Azure virtual machine (VM) named CL0UD2 must be deployed to Microsoft Azure.
Sales department -
Users in the sales department should not be able to run applications on their laptop computers that are not approved by the security department. Users in the sales department should have no such restrictions while they work on the desktop computers in the office.
Technical Requirements -
App1 requirements -
You have the following requirements:
The size of the database for App1 must be increased to 8 TB.
The encryption keys for App1 should not be replicated to the offices where physical server security is not guaranteed.
The amount of disk space that is used by Microsoft Azure must be minimized.
Infrastructure requirements -
You have the following requirements:
The lab.contoso.com DNS domain zone must not be replicated or transferred to DNS servers outside of the London office.
A new DNS domain zone named research.contoso.com must be deployed for users in the research department.
The research.contoso.com DNS domain zone must be protected by using DNS Security Extensions {DNSSEC).
All computers in the London and Madrid offices must install Windows Updates from the server WSUS1.
A new domain controller for the contoso.com domain must be deployed in the Madrid office.
Replication traffic must be minimized when the new domain controllers are deployed.
New WMI filters must not conflict with existing WMI filters.
You need to deploy the new domain controller for the Madrid office.
What should you do?
- A. Run the Windows PowerShell cmdlet Install-ADDSDomainController in the Madrid office and specify the CriticalReplicationOnly Parameter.
- B. Prepare DC1 for virtual domain controller cloning and then copy the clone to the Madrid office.
- C. Run the Windows Powershell cmdlet Install-ADDSDomain in the Madrid office and specify the NoGlobalCatalog parameter.
- D. Prepare Active Directory Domain Services installation media on DC1, and use the media to deploy a read-only domain controller in the Madrid office.
Answer : A
Reference:
https://docs.microsoft.com/en-us/powershell/module/addsdeployment/install-addsdomaincontroller?view=win10-ps
Woodgrove Bank -
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Woodgrove Bank is a financial services company that has two main offices and hundreds of branch offices. One main office is located in New York and the other is located in Los Angeles. The company has an Active Directory Domain Services (AD DS) domain named woodgrovebank.com that contains two data centers.
Each data center has three domain controllers (DCs) that also run the DNS and DHCP server roles. Each DC name and location is listed in the following table:
Each data center also has approximately 20 additional servers to perform a variety of tasks.
New York -
The data center in the New York office has the following System Center 2012 R2 servers:
Los Angeles -
The data center in the Los Angeles office is the secondary data center. It has the following servers:
Business requirements:
Line-of-business applications -
A line-of-business (LOB) application named App1 is deployed on LA-SRV01 and LA-SRV02.
Backups -
All company data is temporarily backed up by using snapshots, and then archived to long-term media. When possible, metadata and non-critical information must be stored by using AD DS.
Monitoring -
System Center is used as the primary monitoring tool for server and application performance. The company also plans to monitor core services, such as DNS,
DHCP, and AD DS. Any additional monitoring capabilities must be performed by using System Center.
Active Directory -
The company plans to use Active Directory to store personal information for employees. Users in the branch offices must not be able to view the confidential data that is stored for other users.
File shares -
The NY-SRV05 server acts as the primary file server in the domain. File shares are replicated to LA-SRV03. Client computers use NY-SRV05 to access files in the file share. BranchCache distributed mode is enabled in each branch office. Each client computer has a 250-GB hard drive that is used by the local cache.
BranchCache must be able to use up to 10% of the 250-GB hard drive for the local cache.
Consolidation -
The company plans to consolidate the amount of servers that are in both data centers. Company management needs to generate a report that describes how consolidation will affect power and cooling costs in the data center.
Technical Requirements -
Server deployments -
The existing Microsoft Azure environment does not have the ability to expand automatically. The Azure environment must support the ability to deploy additional virtual machines (VMs) automatically. The on-premises deployment environments must deploy only to trusted computers. When possible, System Center must be used to deploy and manage the on-premises and Azure environments. System Center must also be used to migrate existing virtual machines from VMM to Azure.
Monitoring -
The DHCP service must be monitored and reported if the service stops or restarts. Additionally, DHCP scope and Network Access Protection (NAP) related events must be monitored.
Azure migration -
The company plans to migrate existing services, including System Center management servers, to Azure. To reduce costs, the migration must use the minimum number of Azure VM instances to migrate the services.
App1 -
App1 uses a DNS application directory partition on LA-DC01 and NY-DC01. App1 uses IPv6 for network connectivity and must resolve single-label names for resources in the woodgrovebank.com DNS domain. A GlobalNames zone has been created, but the zone has not been populated with resource records.
Active Directory Domain Services
The company plans to use the Employee-Number user property to store personal identification numbers.
File shares -
Each branch office connects to the New York data center to retrieve file shares. BranchCache distributed mode is enabled in each branch office. The cache on each client computer must be a single file.
Consolidation reports -
The company requires a report that describes the impact of consolidation. The report must provide the following information:
An inventory of the existing physical server environment
Visual charts that show the reduction of physical servers
DRAG DROP -
You need to design the DNS zone for App1.
What should you do? To answer, drag the appropriate resource record to the correct DNS se Each resource record may be used once, more than once, or not at all. You may need to drag split bar between panes or scroll to view content.
Select and Place:
Answer :
Explanation:
Scenario:
✑ A line-of-business (LOB) application namedApp1 is deployed on LA-SRV01 and LA-SRV02.
App1 uses a DNS application directory partition on LA-DC01 and NY-DC01. App1uses IPv6 for network connectivity and must resolve single-label names for
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Woodgrove Bank is a financial services company that has two main offices and hundreds of branch offices. One main office is located in New York and the other is located in Los Angeles. The company has an Active Directory Domain Services (AD DS) domain named woodgrovebank.com that contains two data centers.
Each data center has three domain controllers (DCs) that also run the DNS and DHCP server roles. Each DC name and location is listed in the following table:
Each data center also has approximately 20 additional servers to perform a variety of tasks.
New York -
The data center in the New York office has the following System Center 2012 R2 servers:
Los Angeles -
The data center in the Los Angeles office is the secondary data center. It has the following servers:
Business requirements:
Line-of-business applications -
A line-of-business (LOB) application named App1 is deployed on LA-SRV01 and LA-SRV02.
Backups -
All company data is temporarily backed up by using snapshots, and then archived to long-term media. When possible, metadata and non-critical information must be stored by using AD DS.
Monitoring -
System Center is used as the primary monitoring tool for server and application performance. The company also plans to monitor core services, such as DNS,
DHCP, and AD DS. Any additional monitoring capabilities must be performed by using System Center.
Active Directory -
The company plans to use Active Directory to store personal information for employees. Users in the branch offices must not be able to view the confidential data that is stored for other users.
File shares -
The NY-SRV05 server acts as the primary file server in the domain. File shares are replicated to LA-SRV03. Client computers use NY-SRV05 to access files in the file share. BranchCache distributed mode is enabled in each branch office. Each client computer has a 250-GB hard drive that is used by the local cache.
BranchCache must be able to use up to 10% of the 250-GB hard drive for the local cache.
Consolidation -
The company plans to consolidate the amount of servers that are in both data centers. Company management needs to generate a report that describes how consolidation will affect power and cooling costs in the data center.
Technical Requirements -
Server deployments -
The existing Microsoft Azure environment does not have the ability to expand automatically. The Azure environment must support the ability to deploy additional virtual machines (VMs) automatically. The on-premises deployment environments must deploy only to trusted computers. When possible, System Center must be used to deploy and manage the on-premises and Azure environments. System Center must also be used to migrate existing virtual machines from VMM to Azure.
Monitoring -
The DHCP service must be monitored and reported if the service stops or restarts. Additionally, DHCP scope and Network Access Protection (NAP) related events must be monitored.
Azure migration -
The company plans to migrate existing services, including System Center management servers, to Azure. To reduce costs, the migration must use the minimum number of Azure VM instances to migrate the services.
App1 -
App1 uses a DNS application directory partition on LA-DC01 and NY-DC01. App1 uses IPv6 for network connectivity and must resolve single-label names for resources in the woodgrovebank.com DNS domain. A GlobalNames zone has been created, but the zone has not been populated with resource records.
Active Directory Domain Services
The company plans to use the Employee-Number user property to store personal identification numbers.
File shares -
Each branch office connects to the New York data center to retrieve file shares. BranchCache distributed mode is enabled in each branch office. The cache on each client computer must be a single file.
Consolidation reports -
The company requires a report that describes the impact of consolidation. The report must provide the following information:
An inventory of the existing physical server environment
Visual charts that show the reduction of physical servers
You need to limit the amount of disk space that is used on the client devices.
Which Windows PowerShell cmdlet or cmdlets should you run?
- A. Add-BCDataCacheExtension
- B. Set-BCDataCacheEntryMaxAge
- C. Disable-BC and Enable-BCLocal
- D. Set-BCCache
- E. Clear-BCCache
Answer : D
Explanation:
Scenario: File shares -
Each branch office connects to the New York data center to retrieve file shares. BranchCache distributed mode is enabled in each branch office. The cache on each client computer must be a single file.
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Woodgrove Bank is a financial services company that has two main offices and hundreds of branch offices. One main office is located in New York and the other is located in Los Angeles. The company has an Active Directory Domain Services (AD DS) domain named woodgrovebank.com that contains two data centers.
Each data center has three domain controllers (DCs) that also run the DNS and DHCP server roles. Each DC name and location is listed in the following table:
Each data center also has approximately 20 additional servers to perform a variety of tasks.
New York -
The data center in the New York office has the following System Center 2012 R2 servers:
Los Angeles -
The data center in the Los Angeles office is the secondary data center. It has the following servers:
Business requirements:
Line-of-business applications -
A line-of-business (LOB) application named App1 is deployed on LA-SRV01 and LA-SRV02.
Backups -
All company data is temporarily backed up by using snapshots, and then archived to long-term media. When possible, metadata and non-critical information must be stored by using AD DS.
Monitoring -
System Center is used as the primary monitoring tool for server and application performance. The company also plans to monitor core services, such as DNS,
DHCP, and AD DS. Any additional monitoring capabilities must be performed by using System Center.
Active Directory -
The company plans to use Active Directory to store personal information for employees. Users in the branch offices must not be able to view the confidential data that is stored for other users.
File shares -
The NY-SRV05 server acts as the primary file server in the domain. File shares are replicated to LA-SRV03. Client computers use NY-SRV05 to access files in the file share. BranchCache distributed mode is enabled in each branch office. Each client computer has a 250-GB hard drive that is used by the local cache.
BranchCache must be able to use up to 10% of the 250-GB hard drive for the local cache.
Consolidation -
The company plans to consolidate the amount of servers that are in both data centers. Company management needs to generate a report that describes how consolidation will affect power and cooling costs in the data center.
Technical Requirements -
Server deployments -
The existing Microsoft Azure environment does not have the ability to expand automatically. The Azure environment must support the ability to deploy additional virtual machines (VMs) automatically. The on-premises deployment environments must deploy only to trusted computers. When possible, System Center must be used to deploy and manage the on-premises and Azure environments. System Center must also be used to migrate existing virtual machines from VMM to Azure.
Monitoring -
The DHCP service must be monitored and reported if the service stops or restarts. Additionally, DHCP scope and Network Access Protection (NAP) related events must be monitored.
Azure migration -
The company plans to migrate existing services, including System Center management servers, to Azure. To reduce costs, the migration must use the minimum number of Azure VM instances to migrate the services.
App1 -
App1 uses a DNS application directory partition on LA-DC01 and NY-DC01. App1 uses IPv6 for network connectivity and must resolve single-label names for resources in the woodgrovebank.com DNS domain. A GlobalNames zone has been created, but the zone has not been populated with resource records.
Active Directory Domain Services
The company plans to use the Employee-Number user property to store personal identification numbers.
File shares -
Each branch office connects to the New York data center to retrieve file shares. BranchCache distributed mode is enabled in each branch office. The cache on each client computer must be a single file.
Consolidation reports -
The company requires a report that describes the impact of consolidation. The report must provide the following information:
An inventory of the existing physical server environment
Visual charts that show the reduction of physical servers
You need to implement the Microsoft Azure migration plan. What should you do?
- A. On Microsoft Azure, install and configure System Center 2012 R2 Virtual Machine Manager.
- B. On an on-premises server, install and configure System Center 2012 R2 Service Manager.
- C. On an on-premises server, install and configure System Center 2012 R2 App Controller.
- D. On an on-premises server, install and configure Windows Deployment Services.
- E. On Microsoft Azure, install and configure System Center 2012 R2 Orchestrator.
Answer : C
Explanation:
Scenario: Azure migration -
The company plans to migrate existing services, including System Center management servers, to Azure. To reduce costs, the migration must use the minimum number of Azure VM instances to migrate the services.
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Woodgrove Bank is a financial services company that has two main offices and hundreds of branch offices. One main office is located in New York and the other is located in Los Angeles. The company has an Active Directory Domain Services (AD DS) domain named woodgrovebank.com that contains two data centers.
Each data center has three domain controllers (DCs) that also run the DNS and DHCP server roles. Each DC name and location is listed in the following table:
Each data center also has approximately 20 additional servers to perform a variety of tasks.
New York -
The data center in the New York office has the following System Center 2012 R2 servers:
Los Angeles -
The data center in the Los Angeles office is the secondary data center. It has the following servers:
Business requirements:
Line-of-business applications -
A line-of-business (LOB) application named App1 is deployed on LA-SRV01 and LA-SRV02.
Backups -
All company data is temporarily backed up by using snapshots, and then archived to long-term media. When possible, metadata and non-critical information must be stored by using AD DS.
Monitoring -
System Center is used as the primary monitoring tool for server and application performance. The company also plans to monitor core services, such as DNS,
DHCP, and AD DS. Any additional monitoring capabilities must be performed by using System Center.
Active Directory -
The company plans to use Active Directory to store personal information for employees. Users in the branch offices must not be able to view the confidential data that is stored for other users.
File shares -
The NY-SRV05 server acts as the primary file server in the domain. File shares are replicated to LA-SRV03. Client computers use NY-SRV05 to access files in the file share. BranchCache distributed mode is enabled in each branch office. Each client computer has a 250-GB hard drive that is used by the local cache.
BranchCache must be able to use up to 10% of the 250-GB hard drive for the local cache.
Consolidation -
The company plans to consolidate the amount of servers that are in both data centers. Company management needs to generate a report that describes how consolidation will affect power and cooling costs in the data center.
Technical Requirements -
Server deployments -
The existing Microsoft Azure environment does not have the ability to expand automatically. The Azure environment must support the ability to deploy additional virtual machines (VMs) automatically. The on-premises deployment environments must deploy only to trusted computers. When possible, System Center must be used to deploy and manage the on-premises and Azure environments. System Center must also be used to migrate existing virtual machines from VMM to Azure.
Monitoring -
The DHCP service must be monitored and reported if the service stops or restarts. Additionally, DHCP scope and Network Access Protection (NAP) related events must be monitored.
Azure migration -
The company plans to migrate existing services, including System Center management servers, to Azure. To reduce costs, the migration must use the minimum number of Azure VM instances to migrate the services.
App1 -
App1 uses a DNS application directory partition on LA-DC01 and NY-DC01. App1 uses IPv6 for network connectivity and must resolve single-label names for resources in the woodgrovebank.com DNS domain. A GlobalNames zone has been created, but the zone has not been populated with resource records.
Active Directory Domain Services
The company plans to use the Employee-Number user property to store personal identification numbers.
File shares -
Each branch office connects to the New York data center to retrieve file shares. BranchCache distributed mode is enabled in each branch office. The cache on each client computer must be a single file.
Consolidation reports -
The company requires a report that describes the impact of consolidation. The report must provide the following information:
An inventory of the existing physical server environment
Visual charts that show the reduction of physical servers
You have an IP Address Management (IPAM) server that runs Windows Server 2012 SP1. You need to integrate the IPAM server with System Center Virtual
Machine Manager (SCVMM).
Solution: You create a dedicated user account named IPAM_svc, and add it to the Local Administrators local group on the SCVMM server.
- A. Yes
- B. No
Answer : B
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Woodgrove Bank is a financial services company that has two main offices and hundreds of branch offices. One main office is located in New York and the other is located in Los Angeles. The company has an Active Directory Domain Services (AD DS) domain named woodgrovebank.com that contains two data centers.
Each data center has three domain controllers (DCs) that also run the DNS and DHCP server roles. Each DC name and location is listed in the following table:
Each data center also has approximately 20 additional servers to perform a variety of tasks.
New York -
The data center in the New York office has the following System Center 2012 R2 servers:
Los Angeles -
The data center in the Los Angeles office is the secondary data center. It has the following servers:
Business requirements:
Line-of-business applications -
A line-of-business (LOB) application named App1 is deployed on LA-SRV01 and LA-SRV02.
Backups -
All company data is temporarily backed up by using snapshots, and then archived to long-term media. When possible, metadata and non-critical information must be stored by using AD DS.
Monitoring -
System Center is used as the primary monitoring tool for server and application performance. The company also plans to monitor core services, such as DNS,
DHCP, and AD DS. Any additional monitoring capabilities must be performed by using System Center.
Active Directory -
The company plans to use Active Directory to store personal information for employees. Users in the branch offices must not be able to view the confidential data that is stored for other users.
File shares -
The NY-SRV05 server acts as the primary file server in the domain. File shares are replicated to LA-SRV03. Client computers use NY-SRV05 to access files in the file share. BranchCache distributed mode is enabled in each branch office. Each client computer has a 250-GB hard drive that is used by the local cache.
BranchCache must be able to use up to 10% of the 250-GB hard drive for the local cache.
Consolidation -
The company plans to consolidate the amount of servers that are in both data centers. Company management needs to generate a report that describes how consolidation will affect power and cooling costs in the data center.
Technical Requirements -
Server deployments -
The existing Microsoft Azure environment does not have the ability to expand automatically. The Azure environment must support the ability to deploy additional virtual machines (VMs) automatically. The on-premises deployment environments must deploy only to trusted computers. When possible, System Center must be used to deploy and manage the on-premises and Azure environments. System Center must also be used to migrate existing virtual machines from VMM to Azure.
Monitoring -
The DHCP service must be monitored and reported if the service stops or restarts. Additionally, DHCP scope and Network Access Protection (NAP) related events must be monitored.
Azure migration -
The company plans to migrate existing services, including System Center management servers, to Azure. To reduce costs, the migration must use the minimum number of Azure VM instances to migrate the services.
App1 -
App1 uses a DNS application directory partition on LA-DC01 and NY-DC01. App1 uses IPv6 for network connectivity and must resolve single-label names for resources in the woodgrovebank.com DNS domain. A GlobalNames zone has been created, but the zone has not been populated with resource records.
Active Directory Domain Services
The company plans to use the Employee-Number user property to store personal identification numbers.
File shares -
Each branch office connects to the New York data center to retrieve file shares. BranchCache distributed mode is enabled in each branch office. The cache on each client computer must be a single file.
Consolidation reports -
The company requires a report that describes the impact of consolidation. The report must provide the following information:
An inventory of the existing physical server environment
Visual charts that show the reduction of physical servers
You need to implement a solution to monitor the DHCP services.
What should you do?
- A. Forward the event log files from the DHCP server to the System Center Operations Manager serve.
- B. Install the Windows Server DHCP Management Pack for System Center Operations Manager.
- C. Configure the DHCP services in a failover configuration.
- D. Create a subscription event log to collect the log files from each DHCP server.
Answer : B
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Woodgrove Bank is a financial services company that has two main offices and hundreds of branch offices. One main office is located in New York and the other is located in Los Angeles. The company has an Active Directory Domain Services (AD DS) domain named woodgrovebank.com that contains two data centers.
Each data center has three domain controllers (DCs) that also run the DNS and DHCP server roles. Each DC name and location is listed in the following table:
Each data center also has approximately 20 additional servers to perform a variety of tasks.
New York -
The data center in the New York office has the following System Center 2012 R2 servers:
Los Angeles -
The data center in the Los Angeles office is the secondary data center. It has the following servers:
Business requirements:
Line-of-business applications -
A line-of-business (LOB) application named App1 is deployed on LA-SRV01 and LA-SRV02.
Backups -
All company data is temporarily backed up by using snapshots, and then archived to long-term media. When possible, metadata and non-critical information must be stored by using AD DS.
Monitoring -
System Center is used as the primary monitoring tool for server and application performance. The company also plans to monitor core services, such as DNS,
DHCP, and AD DS. Any additional monitoring capabilities must be performed by using System Center.
Active Directory -
The company plans to use Active Directory to store personal information for employees. Users in the branch offices must not be able to view the confidential data that is stored for other users.
File shares -
The NY-SRV05 server acts as the primary file server in the domain. File shares are replicated to LA-SRV03. Client computers use NY-SRV05 to access files in the file share. BranchCache distributed mode is enabled in each branch office. Each client computer has a 250-GB hard drive that is used by the local cache.
BranchCache must be able to use up to 10% of the 250-GB hard drive for the local cache.
Consolidation -
The company plans to consolidate the amount of servers that are in both data centers. Company management needs to generate a report that describes how consolidation will affect power and cooling costs in the data center.
Technical Requirements -
Server deployments -
The existing Microsoft Azure environment does not have the ability to expand automatically. The Azure environment must support the ability to deploy additional virtual machines (VMs) automatically. The on-premises deployment environments must deploy only to trusted computers. When possible, System Center must be used to deploy and manage the on-premises and Azure environments. System Center must also be used to migrate existing virtual machines from VMM to Azure.
Monitoring -
The DHCP service must be monitored and reported if the service stops or restarts. Additionally, DHCP scope and Network Access Protection (NAP) related events must be monitored.
Azure migration -
The company plans to migrate existing services, including System Center management servers, to Azure. To reduce costs, the migration must use the minimum number of Azure VM instances to migrate the services.
App1 -
App1 uses a DNS application directory partition on LA-DC01 and NY-DC01. App1 uses IPv6 for network connectivity and must resolve single-label names for resources in the woodgrovebank.com DNS domain. A GlobalNames zone has been created, but the zone has not been populated with resource records.
Active Directory Domain Services
The company plans to use the Employee-Number user property to store personal identification numbers.
File shares -
Each branch office connects to the New York data center to retrieve file shares. BranchCache distributed mode is enabled in each branch office. The cache on each client computer must be a single file.
Consolidation reports -
The company requires a report that describes the impact of consolidation. The report must provide the following information:
An inventory of the existing physical server environment
Visual charts that show the reduction of physical servers
You need to generate the required report
Which tool should you use?
- A. Microsoft Deployment Toolkit (MDT)
- B. Microsoft Desktop Optimization Pack (MDOP)
- C. Microsoft Assessment and Planning Toolkit (MAP)
- D. Application Compatibility Toolkit (ACT)
Answer : C
Scenario: Consolidation reports -
The company requires a report that describes the impact of consolidation. The report must provide the following information:
✑ An inventory of the existing physical server environment
✑ Visual charts that show the reduction of physical servers
Case Study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. Note that the information displayed on the All Information tab is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background -
Overview -
Woodgrove Bank is a financial services company that has two main offices and hundreds of branch offices. One main office is located in New York and the other is located in Los Angeles. The company has an Active Directory Domain Services (AD DS) domain named woodgrovebank.com that contains two data centers.
Each data center has three domain controllers (DCs) that also run the DNS and DHCP server roles. Each DC name and location is listed in the following table:
Each data center also has approximately 20 additional servers to perform a variety of tasks.
New York -
The data center in the New York office has the following System Center 2012 R2 servers:
Los Angeles -
The data center in the Los Angeles office is the secondary data center. It has the following servers:
Business requirements:
Line-of-business applications -
A line-of-business (LOB) application named App1 is deployed on LA-SRV01 and LA-SRV02.
Backups -
All company data is temporarily backed up by using snapshots, and then archived to long-term media. When possible, metadata and non-critical information must be stored by using AD DS.
Monitoring -
System Center is used as the primary monitoring tool for server and application performance. The company also plans to monitor core services, such as DNS,
DHCP, and AD DS. Any additional monitoring capabilities must be performed by using System Center.
Active Directory -
The company plans to use Active Directory to store personal information for employees. Users in the branch offices must not be able to view the confidential data that is stored for other users.
File shares -
The NY-SRV05 server acts as the primary file server in the domain. File shares are replicated to LA-SRV03. Client computers use NY-SRV05 to access files in the file share. BranchCache distributed mode is enabled in each branch office. Each client computer has a 250-GB hard drive that is used by the local cache.
BranchCache must be able to use up to 10% of the 250-GB hard drive for the local cache.
Consolidation -
The company plans to consolidate the amount of servers that are in both data centers. Company management needs to generate a report that describes how consolidation will affect power and cooling costs in the data center.
Technical Requirements -
Server deployments -
The existing Microsoft Azure environment does not have the ability to expand automatically. The Azure environment must support the ability to deploy additional virtual machines (VMs) automatically. The on-premises deployment environments must deploy only to trusted computers. When possible, System Center must be used to deploy and manage the on-premises and Azure environments. System Center must also be used to migrate existing virtual machines from VMM to Azure.
Monitoring -
The DHCP service must be monitored and reported if the service stops or restarts. Additionally, DHCP scope and Network Access Protection (NAP) related events must be monitored.
Azure migration -
The company plans to migrate existing services, including System Center management servers, to Azure. To reduce costs, the migration must use the minimum number of Azure VM instances to migrate the services.
App1 -
App1 uses a DNS application directory partition on LA-DC01 and NY-DC01. App1 uses IPv6 for network connectivity and must resolve single-label names for resources in the woodgrovebank.com DNS domain. A GlobalNames zone has been created, but the zone has not been populated with resource records.
Active Directory Domain Services
The company plans to use the Employee-Number user property to store personal identification numbers.
File shares -
Each branch office connects to the New York data center to retrieve file shares. BranchCache distributed mode is enabled in each branch office. The cache on each client computer must be a single file.
Consolidation reports -
The company requires a report that describes the impact of consolidation. The report must provide the following information:
An inventory of the existing physical server environment
Visual charts that show the reduction of physical servers
HOTSPOT -
You need to protect the personal data of employees.
What should you do? To answer, select the appropriate options in the answer area.
Hot Area:
Answer :
Explanation:
Scenario:
Active Directory -
The company plans to use Active Directory to store personal information for employees. Users in the branch offices must not be able to view the confidential data that is stored for other users.
Active Directory Domain Services
The company plans to use the Employee-Number user property to store personal identification numbers.
Parnell Aerospace -
Background -
Overview -
Parnell Aerospace designs materials and components that are used for commercial airlines. Parnell has a main office in Dallas and branch offices in Seattle,
Atlanta, and New York. Parnell has an Active Directory Domain Services (AD DS) domain named parnellaero.com for the Dallas and Atlanta offices. The forest and domain functional levels are set to Windows Server 2008.
Domain Controllers -
The domain Controllers are displayed in the following table:
The Seattle and New York offices have their own child domain named sales.parnellaero.com. The domain controllers are displayed in the following table:
Parnell also has a number of satellite offices, without domain controllers, that act as both sales and design locations. Employees have the ability to walk into any office to connect to their respective domain and access the software they need.
All servers in each office run Windows Server 2012 R2 and are 64-bit platforms. Client devices in each office run Windows 7 and Windows 8.1.
Expansion -
Parnell Aerospace is expanding to Great Britain. Parnell creates the domain uk.parnellaero.com for the new offices to use.
Parnell creates a new sales office in London.
Parnell also purchases a company in Glasgow named Flight Build that can expand Parnellג€™s research and design division. Flight build has low security and limited bandwidth. Flight Build has the domain name flightbuild.com. Flight Build has a single domain controller named FB-DC. Flight Build users use an application that must run on the domain controller.
Flight Buildג€™s server environment contains a server that runs Windows Server 2012 R2 and has Microsoft SQL Server 2012 installed. Ports 12345, 6789, and
10111 have been assigned for System Center Virtual Machine Manager (SCVMM) connections.
The domain controllers for the two new offices are displayed in the following table:
Business Requirement -
Accessing data globally -
Employees in any office, including satellite and branch offices, must be able to work securely on internal applications, independent of device, and still access all of the information they need. At times, a large percentage of users congregate in the same geography to work on a specific task, and environments need to scale quickly to meet the demands.
Application performance -
In order to allow multiple simultaneous users to access the design application, the design application is published by using SCVMM.
Data conformity -
All data needs to be synchronized between all offices to ensure that all users have the latest information available.
Disaster preparedness -
In case of natural disaster, Parnell Aerospace must be able to continue work without disruption. Servers in any location must be restored rapidly.
Expansion -
The domain flightbuild.com must be renamed to integrate it into the domain uk.parnellaero.com.
Users in the newly acquired Glasgow office report issues with long logon times. Parnell Aerospace must prepare a new domain controller for the logon traffic.
Parnell plans to deploy an additional SCVMM server in the Flight Build server environment.
Sales reports -
Parnell Aerospaceג€™s sales organization uses a large number of sales reports that are in the Excel format. The reports are very large and accessed often throughout the day. Users report that it takes a long time to open the files, even when they are using the local network.
Technical Requirement -
Mixed environment -
The existing environment contains Windows servers and legacy UNIX servers. All UNIX servers run 32-bit operating systems. A server named UNIX1 stores legacy data. The device name for UNIX1 is FileServe1.
Sales reports -
Sales reports must be saved on an automated storage tier named SalesReports. All file servers are equipped with both solid-state drives and standard hard-disk drives.
Sales application -
A sales application in the parnellaero.com domain must be accessible to users outside of the network during sales calls. The application is configured by using automatic triggering of VPN connections.
Design application -
A design application must allow automatic logon by using VPN when users in the parnellaero.com domain are working from a location outside of the office. Users report the authentication fails.
UK Division Sales -
Sales people in the new UK division must be able to access a web-based sales application named UKSales that is used in their geography by using any device, including hand-held units, smart phones, and laptop computers.
Active Directory -
The Active Directory Recycle Bin must be enabled throughout the forest.
You need to resolve the access issue at the newly acquired office.
What should you do?
- A. Install a domain controller and configure Universal Group Membership Caching.
- B. Install a domain controller and add the Global Catalog role.
- C. Install a domain controller and enable BranchCache.
- D. Install a read-only domain controller.
Answer : D
Explanation:
ג€Flight build has low security and limited bandwidth. Flight Build users use an application that must run on the domain controller.ג€
You can install the application on the RODC.
Reference:
https://technet.microsoft.com/en-us/library/cc755310(v=ws.10).aspx
Background -
Overview -
Parnell Aerospace designs materials and components that are used for commercial airlines. Parnell has a main office in Dallas and branch offices in Seattle,
Atlanta, and New York. Parnell has an Active Directory Domain Services (AD DS) domain named parnellaero.com for the Dallas and Atlanta offices. The forest and domain functional levels are set to Windows Server 2008.
Domain Controllers -
The domain Controllers are displayed in the following table:
The Seattle and New York offices have their own child domain named sales.parnellaero.com. The domain controllers are displayed in the following table:
Parnell also has a number of satellite offices, without domain controllers, that act as both sales and design locations. Employees have the ability to walk into any office to connect to their respective domain and access the software they need.
All servers in each office run Windows Server 2012 R2 and are 64-bit platforms. Client devices in each office run Windows 7 and Windows 8.1.
Expansion -
Parnell Aerospace is expanding to Great Britain. Parnell creates the domain uk.parnellaero.com for the new offices to use.
Parnell creates a new sales office in London.
Parnell also purchases a company in Glasgow named Flight Build that can expand Parnellג€™s research and design division. Flight build has low security and limited bandwidth. Flight Build has the domain name flightbuild.com. Flight Build has a single domain controller named FB-DC. Flight Build users use an application that must run on the domain controller.
Flight Buildג€™s server environment contains a server that runs Windows Server 2012 R2 and has Microsoft SQL Server 2012 installed. Ports 12345, 6789, and
10111 have been assigned for System Center Virtual Machine Manager (SCVMM) connections.
The domain controllers for the two new offices are displayed in the following table:
Business Requirement -
Accessing data globally -
Employees in any office, including satellite and branch offices, must be able to work securely on internal applications, independent of device, and still access all of the information they need. At times, a large percentage of users congregate in the same geography to work on a specific task, and environments need to scale quickly to meet the demands.
Application performance -
In order to allow multiple simultaneous users to access the design application, the design application is published by using SCVMM.
Data conformity -
All data needs to be synchronized between all offices to ensure that all users have the latest information available.
Disaster preparedness -
In case of natural disaster, Parnell Aerospace must be able to continue work without disruption. Servers in any location must be restored rapidly.
Expansion -
The domain flightbuild.com must be renamed to integrate it into the domain uk.parnellaero.com.
Users in the newly acquired Glasgow office report issues with long logon times. Parnell Aerospace must prepare a new domain controller for the logon traffic.
Parnell plans to deploy an additional SCVMM server in the Flight Build server environment.
Sales reports -
Parnell Aerospaceג€™s sales organization uses a large number of sales reports that are in the Excel format. The reports are very large and accessed often throughout the day. Users report that it takes a long time to open the files, even when they are using the local network.
Technical Requirement -
Mixed environment -
The existing environment contains Windows servers and legacy UNIX servers. All UNIX servers run 32-bit operating systems. A server named UNIX1 stores legacy data. The device name for UNIX1 is FileServe1.
Sales reports -
Sales reports must be saved on an automated storage tier named SalesReports. All file servers are equipped with both solid-state drives and standard hard-disk drives.
Sales application -
A sales application in the parnellaero.com domain must be accessible to users outside of the network during sales calls. The application is configured by using automatic triggering of VPN connections.
Design application -
A design application must allow automatic logon by using VPN when users in the parnellaero.com domain are working from a location outside of the office. Users report the authentication fails.
UK Division Sales -
Sales people in the new UK division must be able to access a web-based sales application named UKSales that is used in their geography by using any device, including hand-held units, smart phones, and laptop computers.
Active Directory -
The Active Directory Recycle Bin must be enabled throughout the forest.
HOTSPOT -
You need to ensure that all users can launch the design application.
How should you complete the relevant Windows PowerShell script? To answer, select the appropriate cmdlets in the answer area.
Hot Area:
Answer :
Explanation:
ג€In order to allow multiple simultaneous users to access the design application, the design application is published by using SCVMMג€
Background -
Overview -
Parnell Aerospace designs materials and components that are used for commercial airlines. Parnell has a main office in Dallas and branch offices in Seattle,
Atlanta, and New York. Parnell has an Active Directory Domain Services (AD DS) domain named parnellaero.com for the Dallas and Atlanta offices. The forest and domain functional levels are set to Windows Server 2008.
Domain Controllers -
The domain Controllers are displayed in the following table:
The Seattle and New York offices have their own child domain named sales.parnellaero.com. The domain controllers are displayed in the following table:
Parnell also has a number of satellite offices, without domain controllers, that act as both sales and design locations. Employees have the ability to walk into any office to connect to their respective domain and access the software they need.
All servers in each office run Windows Server 2012 R2 and are 64-bit platforms. Client devices in each office run Windows 7 and Windows 8.1.
Expansion -
Parnell Aerospace is expanding to Great Britain. Parnell creates the domain uk.parnellaero.com for the new offices to use.
Parnell creates a new sales office in London.
Parnell also purchases a company in Glasgow named Flight Build that can expand Parnellג€™s research and design division. Flight build has low security and limited bandwidth. Flight Build has the domain name flightbuild.com. Flight Build has a single domain controller named FB-DC. Flight Build users use an application that must run on the domain controller.
Flight Buildג€™s server environment contains a server that runs Windows Server 2012 R2 and has Microsoft SQL Server 2012 installed. Ports 12345, 6789, and
10111 have been assigned for System Center Virtual Machine Manager (SCVMM) connections.
The domain controllers for the two new offices are displayed in the following table:
Business Requirement -
Accessing data globally -
Employees in any office, including satellite and branch offices, must be able to work securely on internal applications, independent of device, and still access all of the information they need. At times, a large percentage of users congregate in the same geography to work on a specific task, and environments need to scale quickly to meet the demands.
Application performance -
In order to allow multiple simultaneous users to access the design application, the design application is published by using SCVMM.
Data conformity -
All data needs to be synchronized between all offices to ensure that all users have the latest information available.
Disaster preparedness -
In case of natural disaster, Parnell Aerospace must be able to continue work without disruption. Servers in any location must be restored rapidly.
Expansion -
The domain flightbuild.com must be renamed to integrate it into the domain uk.parnellaero.com.
Users in the newly acquired Glasgow office report issues with long logon times. Parnell Aerospace must prepare a new domain controller for the logon traffic.
Parnell plans to deploy an additional SCVMM server in the Flight Build server environment.
Sales reports -
Parnell Aerospaceג€™s sales organization uses a large number of sales reports that are in the Excel format. The reports are very large and accessed often throughout the day. Users report that it takes a long time to open the files, even when they are using the local network.
Technical Requirement -
Mixed environment -
The existing environment contains Windows servers and legacy UNIX servers. All UNIX servers run 32-bit operating systems. A server named UNIX1 stores legacy data. The device name for UNIX1 is FileServe1.
Sales reports -
Sales reports must be saved on an automated storage tier named SalesReports. All file servers are equipped with both solid-state drives and standard hard-disk drives.
Sales application -
A sales application in the parnellaero.com domain must be accessible to users outside of the network during sales calls. The application is configured by using automatic triggering of VPN connections.
Design application -
A design application must allow automatic logon by using VPN when users in the parnellaero.com domain are working from a location outside of the office. Users report the authentication fails.
UK Division Sales -
Sales people in the new UK division must be able to access a web-based sales application named UKSales that is used in their geography by using any device, including hand-held units, smart phones, and laptop computers.
Active Directory -
The Active Directory Recycle Bin must be enabled throughout the forest.
You need to give the Great Britain division access to the UKSales application.
What should you set up?
- A. a multi-tenant Remote Access VPN gateway
- B. a Border Gateway Protocol
- C. a multi-tenant client-to-site VPN gateway
- D. a Web Application Proxy
Answer : D
Explanation:
Reference:
https://technet.microsoft.com/en-us/library/dn280942(v=ws.11).aspx