QUESTION 51
You are planning the decommissioning of research.contoso.com. You need to ensure that an administrator named Admin5 in the research department can manage the user accounts that are migrated to contoso. com. The solution must minimize the number of permissions assigned to Admin5. What should you do before you migrate the user accounts?
A. Run the New-Object cmdlet, and then run the Add-ADCentralAccessPolicyMember cmdlet.
B. Create a new organizational unit (OU), and then add Admin5 to the Account Operators group.
C. Run the New-Object cmdlet, and then run the Add-ADPrincipalGroupMembership cmdlet.
D. Create a new organizational unit (OU), and then run the Delegation of Control Wizard.
Answer: D
Fallstudientitel
Fallstudientitel (Case Study):
Overview
Contoso, Ltd., is a healthcare company in Europe that has 2,000 users. The company is migrating to Windows Server 2012.
The company has two main offices and two branch offices. The main offices are located in Paris and Amsterdam. One of the branch offices is a sales office located in Berlin. The other branch office is a research office located in Brussels. The offices connect to each other by using a WAN link.
Current Environment
Active Directory
The network contains an Active Directory forest named contoso.com. An Active Directory site exists for each office.
The forest contains a child domain named research.contoso.com. The functional level of both the domains is Windows Server 2008. In each site, there are two domain controllers for the contoso.com domain and two domain controllers for the research.contoso.com domain. The domain controllers run Windows Server 2008 R2.
All of the domain controllers are global catalog servers. The FSMO roles were not moved since the domains were deployed.
Network Infrastructure
All servers run Windows Server 2008 R2.
Each user has a laptop computer that runs Windows 7. The company has 10 print servers. Each print server contains several shared printers. The company has 10 file servers that have the following disk configurations:
* A simple volume named C that is the System and Boot volume and is formatted NTFS
* A mounted virtual hard disk (VHD) named DATA that is formatted NTFS
* A simple volume named D that is formatted FAT32
* A simple volume named E that is formatted NTFS
* A Clustered Shared Volume (CSV)
The Paris office contains a server named PA1. The Amsterdam office contains a server named AMI. Both servers have the following server roles installed:
* DNS Server
* DHCP Server
* Remote Access
The DNS servers are configured to use the DNS servers of the company’s Internet Service Provider (ISP) as forwarders.
Users often work remotely. The users access the internal network by using an SSTP-based VPN connection.
Requirements
Planned Changes
The company plans to implement the following changes:
* Create a child domain named sales.contoso.com. Only the domain controllers in sales.contoso.com will host a zone for the sales.contoso.com domain. The domain controllers in sales.contoso.com will run Windows Server 2012. The client computers in sales.contoso.com will use the sales.contoso.com domain controllers as their DNS servers.
* Implement two servers in the Amsterdam office and two servers in the Paris office to replace PA1 and AMI. These new servers will run Windows Server 2012 and will not have shared storage.
* Decommission the research.contoso.com domain. All of the users and the Group Policy objects (GPOs) in research.contoso.com will be migrated to contoso.com.
* Migrate the existing print queues to virtualized instances of Windows Server 2012.
* Migrate the file servers to new servers that run Windows Server 2012.
* Implement RADIUS authentication for VPN connections.
* Deploy Windows Server 2012 to all new servers.
Technical Requirements
The company identifies following technical requirements:
* All changes to Group Policies must be logged.
* Network Access Protection (NAP) policies must be managed centrally.
* Core networking services in each office must be redundant if a server fails.
* The possibility of IP address conflicts during the DHCP migration must be minimized.
* A central log of the IP address leases and the users associated to those leases must be created.
* All of the client computers must be able to resolve internal names and internet names.
* Administrators in the Paris office need to deploy a series of desktop restrictions to the entire company by using Group Policy.
* The new sales.contoso.com domain will contain a web application that will access data from a Microsoft SQL Server located in the contoso.com domain. The web application must use integrated Windows authentication. Users’ credentials must be passed from the web applications to the SQL Server.
QUESTION 52
What method should you use to deploy servers?
A. WDS
B. AIK
C. ADK
D. EDT
Answer: A
Litware, Inc. (QUESTION 53 – QUESTION 63)
Case Study 2: Litware, Inc (Case Study):
Overview
Litware, Inc. is a manufacturing company. The company has a main office and two branch offices. The main office is located in Seattle. The branch offices are located in Los Angeles and Boston.
Existing Environment
Active Directory
The network contains an Active Directory forest named litwareinc.com. The forest contains a child domain for each office. The child domains are named boston.litwareinc.com and la.litwareinc.com. An Active Directory site exists for each office. In each domain, all of the client computer accounts reside in an organizational unit (OU) named AllComputers and all of the user accounts reside in an OU named AllUsers. All domain controllers run Windows Server 2008 R2 and are configured as DNS servers. The functional level of the domain and the forest is Windows Server 2008.
Network Infrastructure
The main office has the following servers:
* Five physical Hyper-V hosts that run Windows Server 2012
* Three virtual file servers that run Windows Server 2008 R2
* One physical DHCP server that runs Windows Server 2008 R2
* Ten physical application servers that run Windows Server 2012
* One virtual IP Address Management (IPAM) server that runs Windows Server 2012
* One virtual Windows Server Update Services (WSUS) server that runs Windows Server 2008 R2
* One physical domain controller and two virtual domain controllers that run Windows Server 2008 R2
Each branch office has following servers:
* One virtual file server that runs Windows Server 2008 R2
* Two physical Hyper-V hosts that run Windows Server 2012
* One physical DHCP server that runs Windows Server 2008 R2
* One physical domain controller and two virtual domain controllers that run Windows Server 2008 R2
All of the offices have a high-speed connection to the Internet. The offices connect to each other by using T1 leased lines.
The IPAM server in the main office gathers data from the DNS servers and the DHCP servers in all of the offices.
Requirements
Planned Changes
The company plans to implement the following changes:
* Implement the Active Directory Recycle Bin.
* Implement Network Access Protection (NAP).
* Implement Folder Redirection in the Boston office only.
* Deploy an application named App1 to all of the users in the Boston office only.
* Migrate to IPv6 addressing on all of the servers in the Los Angeles office. Some application servers in the Los Angeles office will have only IPv6 addresses.
Technical Requirements
The company identifies the following technical requirements:
* Minimize the amount of administrative effort whenever possible.
* Ensure that NAP with IPSec enforcement can be configured.
* Rename boston.litwareinc.com domain to bos.htwareinc.com.
* Migrate the DHCP servers from the physical servers to a virtual server that runs Windows Server 2012.
* Ensure that the members of the Operators groups in all three domains can manage the IPAM server from their client computer.
VPN Requirements
You plan to implement a third-party VPN server in each office. The VPN servers will be configured as RADIUS clients. A server that runs Windows Server 2012 will perform RADIUS authentication for all of the VPN connections.
Visualization Requirements
The company identifies the following virtualization requirements:
* Virtualize the application servers.
* Ensure that the additional domain controllers for the branch offices can be deployed by using domain controller cloning.
* Automatically distribute the new virtual machines to Hyper-V hosts based on the current resource usage of the Hyper-V hosts.
Server Deployment Requirements
The company identifies the following requirements for the deployment of new servers on the network:
* Deploy the new servers over the network.
* Ensure that all of the server deployments are done by using multicast.
Security Requirements
A new branch office will open in Chicago. The new branch office will have a single read- only domain controller (RODC). Confidential attributes must not be replicated to the Chicago office.
QUESTION 53
You need to implement the technical requirements for the boston.litwareinc.com domain.
Which tools should you use?
A. Gpfixup and Gpupdate
B. Rendom and Gpfixup
C. Gpupdate and Dcgpofix
D. Adprep and Rendom
Answer: B
QUESTION 54
You need to recommend a server virtualization strategy that meets the technical requirements and the virtualization requirements.
What should you include in the recommendation?
A. Windows Server Backup
B. The Microsoft Virtual Machine Converter
C. Microsoft System Center 2012 Virtual Machine Manager (VMM)
D. Disk2vhd
Answer: C
QUESTION 55
You need to recommend a remote access solution that meets the VPN requirements. Which role service should you include in the recommendation?
A. Routing
B. Network Policy Server
C. DirectAccess and VPN (RAS)
D. Host Credential Authorization Protocol
Answer: B
QUESTION 56
You need to recommend changes to the Active Directory site topology to support on the company’s planned changes.
What should you include in the recommendation?
A. A new site link bridge
B. A new subnet
C. A new site link
D. A new site
Answer: B
QUESTION 57
You need to recommend an IPAM management solution for the Operators groups. The solution must meet the technical requirements.
What should you include in the recommendation?
A. Run the Invoke IpamGpoProvisioning cmdlet in all three domains. Add the computers used by the
members of the Operators group to the IPAM server.
B. Modify the membership of the IPAM Administrators group and the WinRMRemoteWMIUsers__group
on the IPAM server.
C. Run the Set-IpamConfiguration cmdlet on the IPAM server. Run the Invoke-IpamGpoProvisioning
cmdlet in all three domains.
D. Run the Set-IpamConfiguration cmdlet and modify the membership of the WinRMRemoteWMIUsers
____group on the IPAM server.
Answer: B
QUESTION 58
You need to recommend a migration strategy for the DHCP servers. The strategy must meet the technical requirements.
Which Windows PowerShell cmdlet should you recommend running on the physical DHCP servers?
A. Receive-SmigServerData
B. Import-SmigServerSetting
C. Export-SmigServerSetting
D. Send-SmigServerData
Answer: C
QUESTION 59
You need to recommend a solution that meets the security requirements. Which schema attribute properties should you recommend modifying?
A. isCriticalSystemObject
B. searchFlags
C. schemaFlagsEx
D. isIndexed
Answer: C
QUESTION 60
You need to recommend a Group Policy strategy to support the company’s planned changes.
What should you include in the recommendation?
A. Link a Group Policy object (GPO) to the AllComputers OU in each domain.
B. Link a Group Policy object (GPO) to litwareinc.com and configure filtering.
C. Link a Group Policy object (GPO) to each domain.
D. Link a Group Policy object (GPO) to the Boston site.
Answer: D
Passing Microsoft 70-413 Exam successfully in a short time! Just using Braindump2go’s Latest Microsoft 70-413 Dump: http://www.braindump2go.com/70-413.html