70-647 試験問題を無料オンラインアクセス

Your company has one main office and 10 branch offices.
The network contains servers that run Windows Server 2008. The servers are configured as file servers
and are located in the branch office.
You need to plan a security policy for the branch office. The policy must meet the following requirements:
Users must be able to access all files on the servers.
The operating system and the files on the servers must be inaccessible if a server is stolen.
What should you include in your plan?

• A.Configure the servers as read-only domain controllers (RODCs).
• B.Use Windows BitLocker Drive Encryption (BitLocker) on all servers.
• C.Use Encrypting File System (EFS) on the servers.
• D.Use Syskey on the servers.

Your network consists of one Active Directory forest that contains one domain.
The functional level of the forest is Windows 2000.
The functional level of the domain is Windows 2000 native.
Two domain controllers run Windows Server 2008 and three domain controllers run Windows Server 2003.
Service packs are not installed on any of the domain controllers. You plan to enable Windows BitLocker
Drive Encryption (BitLocker) on all domain controllers.
You need to store all BitLocker recovery information in Active Directory Domain Services (AD DS).
What should you do first?

• A.Extend the Active Directory schema to include BitLocker and Trusted Platform Module (TPM) attributes.
• B.Upgrade all Windows Server 2003 domain controllers to Windows Server 2008.
• C.Raise the domain functional level to Windows Server 2003.
• D.Raise the forest functional level to Windows Server 2003.

You are evaluating implementing a high-availability solution for smart card authentication.
You need to recommend changes to the network infrastructure to ensure that all research department users
can log on if a single server fails.
What should you recommend?

• A.Implement a standalone subordinate CA.
• B.Implement an enterprise subordinate CA.
• C.Implement Network Load Balancing (NLB) on the web servers.
• D.Upgrade the CA to Windows Server 2008 R2.

Your company has a main office and a branch office. Your network consists of one Active Directory domain. All domain controllers run Windows Server 2008.
You need to plan the installation of a new server as a read-only domain controller (RODC) in the branch office.
The plan must meet the following requirements:
-A branch office user must complete the RODC installation.
-The branch office user must only be a member of only the Domain Users security group.
What should you do first?

• A.Create an organizational unit (OU) for the branch office. Delegate full control of the OU to the branch office user.
• B.Create an installation media by using ntdsutil.
• C.Pre-create a read-only domain controller (RODC) account for the branch office server.
• D.Instruct the user to join the new server to the domain.

You need to recommend a certificate strategy that meets the company's technical requirements.
What should you recommend?

• A.Deploy the root CA certificate of blueyonderairlines.com to all of the client computers in the fabrikam.com
• B.Modify the issuance polices of Fabrikam.
• C.Modify the issuance polices of Blue Yonder Airlines.
• D.Deploy the root CA certificate of fabrikam.com to all of the client computers in the blueyonderairlines.com