Microsoft Windows Server 2008,Enterprise Administrator Sample Questions:

1. You need to recommend a Public Key Infrastructure (PKI) solution that meets the company's security requirements.
What should you include in the recommendation?

A) Certificate deployment by using Group Policy Objects (GPOs).
B) Active Directory Federation Services (AD FS) and federated trusts.
C) Cross-certification.
D) External trusts and realm trusts.

2. You need to ensure that all of the users in proseware.com log on in an acceptable amount of time.
What should you recommend?

A) Remove the GPO4 link to the Proseware_Sales OU. Link GPO4 to the New York office.
B) Enable universal group membership cashing in the New York office.
C) Deploy an additional Domain Controller for proseware.com in the New York office.
D) Remove the GPO4 link to the Proseware_Sales OU. Copy GPO4 to the proseware.com and link the copy to the Proseware_Sales OU.

3. Your network consists of one Active Directory domain. The domain contains two servers named Server1 and Server2. All servers run Windows Server 2008 R2.
Server1 can be accessed only from the internal network. Server2 can be accessed from the internal network and from the Internet, Server1 runs Microsoft SQL Server 2008.
All client computers are members of the domain and run Windows 7. All client computers run an application that connects to Server1 by using ActiveX Data Objects (ADO).
You need to enable remote users to run the application from the Internet. The solution must meet the following requirements:
-The SQL Server connection method used by the client application must not be changed.
-Remote users must be able to access the application through an HTTP or HTTPS connection.
What should you do on Server2?

A) Install the Web Server (IIS) server role. Configure a Web service that connects to SQL Server on Server1.
B) Install the RPC over HTTP Proxy feature. Configure a proxy connection to Server1.
C) Install the Network Policy and Access Services (NPAS) server role. Enable Secure Socket Tunneling Protocol (SSTP) connections.
D) Install the Remote Desktop Gateway (RD Gateway) role service. Configure an ADO connection to Server1.

4. You work as an IT professional in an international company which is named Contoso. Your major job is to translate business goals into technology decisions and plan mid-range to long-term strategies. And you are experienced in network infrastructure, security policy and business continuity. In your company, you are responsible for infrastructure design and global configuration changes.
There is one Active Directory domain and three Network Information Services (NIS) domains in your
network.
Windows Server 2008 is run by all domain controllers.
All NIS domain servers run UNIX-based operating systems.
Since you are the technical support, the company CIO assigns a task to you. You are asked to plan
the integration of the Active Directory domain and the NIS domains.
Your solution must meet the following requirements:
-Cut down the costs required to implement the solution to the least.
-Cut down the number of additional Windows servers required.
-Provide centralized administration of Active Directory domain objects and NIS domain objects.
What should be included in your plan?

A) The subsystem for UNIX-based applications should be installed.
B) The Server for Network Information Services role service should be added.
C) Install Active Directory Federation Services (AD FS) should be installed.
D) A Microsoft Identity Lifecycle Manager (ILM) 2007 server should be implemented.

5. Your network contains servers that run Windows Server 2008 R2 and client computers that run Windows 7.
You deploy a public key infrastructure by using Certificate Services servers that run Windows Server 2008 R2.
You need to plan the implementation of smart card authentication on the network. The solution must meet the following requirements:
-Help desk users must only be able to enroll user certificates.
-Managers must be able to enroll smartcards for other employees.
-Managers must be able to use their client computers to manage certificates.
What should you include in your plan?

A) Configure Restricted Enrollment Agents.
B) Configure Restricted Certificate Managers.
C) Upgrade all certificates to V3 templates.
D) Enable Web enrollment.

Solutions: