2013年12月29日星期日

Microsoft Certification 70-297 exam pdf

ITCertMaster is continuing to provide the candidates with IT certification exam-related reference materials for years. ITCertMaster.com is the website that is validated by all the test-takers, which can provide all candidates with the best questions and answers. ITCertMaster comprehensively ensures the interests of all candidates, which enjoys immense praise of the candidates. Moreover ITCertMaster is the most trusted website on the current market.

70-297 exam is a new turning point in the IT industry. Get this examination certification, you will become the IT industry's professional high-end person. With the spread and progress of information technology, you will see hundreds of online resources which provide Microsoft 70-297 questions and answers. While ITCertMaster ahead. The reason people choose ITCertMaster Microsoft 70-297 exam training materials is that it can really bring benefits to them, and to help you come true your dreams as soon as possible!

Have you learned ITCertMaster Microsoft 70-297 exam dumps? Why do the people that have used ITCertMaster dumps sing its praises? Do you really want to try it whether it have that so effective? Hurry to click ITCertMaster.com to download our certification training materials. Every question provides you with demo and if you think our exam dumps are good, you can immediately purchase it. After you purchase 70-297 exam dumps, you will get a year free updates. Within a year, only if you would like to update the materials you have, you will get the newer version. With the dumps, you can pass Microsoft 70-297 test with ease and get the certificate.

Exam Code: 70-297
Exam Name: Microsoft (Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure)
Guaranteed success with practice guides, No help, Full refund!
142 Questions and Answers
Updated: 2013-12-29

About Microsoft 70-297 exam, each candidate is very confused. Everyone has their own different ideas. But the same idea is that this is a very difficult exam. We are all aware of Microsoft 70-297 exam is a difficult exam. But as long as we believe ITCertMaster, this will not be a problem. ITCertMaster's Microsoft 70-297 exam training materials is an essential product for each candidate. It is tailor-made for the candidates who will participate in the exam. You will absolutely pass the exam. If you do not believe, then take a look into the website of ITCertMaster. You will be surprised, because its daily purchase rate is the highest. Do not miss it, and add to your shoppingcart quickly.

70-297 Free Demo Download: http://www.itcertmaster.com/70-297.html

NO.1 You are designing a DNS strategy to meet the business and technical requirements. What should you
do?
A.Install the DNS Server service on all domain controllers. Create Active Directory-integrated zones.
Replicate the zones to all DNS servers in the forest.
B.Install the DNS Server service on all domain controllers. Create Active Directory-integrated zones.
Replicate the zones to all DNS servers in the domain.
C.Install the DNS Server service on all domain controllers. Create primary zones and secondary zones.
D.Create application partitions for the different zones on one domain controller. Configure replication to
occur on all DNS servers.
Answer: B

Microsoft braindump   70-297   70-297 demo

NO.2 You are de
you do?
A.Create a Group Policy object (GPO) and link it to the Denver site.
B.Create a Group Policy object (GPO) and link it to the Advertising OU.
C.Create a Group
D.Configure the Default Domain Policy to have the No Override option.
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
advertising dep
Answer: B

Microsoft certification training   70-297 certification training   70-297   70-297   70-297   70-297

NO.3 ou are designing a pass
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.Delegate the password management controls to the help desk staff.
B.Delegate
C.Configure the Default Domain Policy to enforce password expiration settings.
D.Configure the Default Domain Controller Policy to enforce password expiration settings.
Answer: B D

Microsoft   70-297   70-297 demo   70-297 exam prep

NO.4 You are designing a strategy to provide the required security for the Payroll server.You need to identify
the actions that you should perform to achieve this goal.What should you do?
To answer,move the appropriate actions from the list of actions to the answer area,and arrange them in
the appropriate order.(Use only actions that apply.)

NO.5 You are designing the placement of the global catalog servers. You want to use the minimum number of
global catalog servers that are required. Which design should you use?
A.one global catalog server in New York
B.two global catalog servers in New York
C.one global catalog server in Chicago and one global catalog server in New York
D.two global catalog servers in Chicago and two global catalog servers in New York
E.one global catalog server in Chicago, one global catalog server in New York, and one global catalog
server in Boston
Answer: E

Microsoft   70-297   70-297

NO.6 You are designing a strategy to upgrade the DHCP servers after the new Active Directory structure is in
place. Who can authorize the DHCP servers? (Choose all that apply.)
A.chief information officer
B.IT support staff in Boston
C.IT support staff in New York
D.network administrator in Chicago
E.network administrator in New York
Answer: A

Microsoft   70-297   70-297   70-297   70-297

NO.7 Overview
Litware, Inc., is a corporate management company that manages the internal operations for its business
customers.
Internal operations include sales, accounting, and payroll.
Physical Locations
Litware, Inc., has two main offices in the following locations:
? New York
? Chicago
Each office has approximately 300 users.
The New York office has a branch office in Boston. The Boston office has approximately 100 users.
Staff in the Boston exclusively office work on projects for customers in the New York office. The Boston
office has no customers of its own.
Planned Changes
As part of its initiative to streamline the IT environment and increase network security, the company has
decided to implement a Windows Server 2003 Active Directory environment.
The New York office is currently in negotiations to secure Contoso, Ltd., as a new customer.
Business Processes
Litware, Inc., manages the business operations for eight business customers. For each customer,
Litware,
Inc. has a dedicated staff that works exclusively with that customer.
Users require access only to project data for the customers to which they have been directly assigned.
The
New York and Chicago offices are responsible for their own customers and maintain them separately.
Each individual customer project is listed in the following table.
Customers name Managed by
Alpine Ski House New York
Baldwin Museum of Science Chicago
Coho Vineyard New York
Fabrikam, Inc. New York
Humongous Insurance Chicago
Lucerne Publishing New York
Wingtip Toys Chicago
Woodgrove Bank Chicago
The chief information officer is the only person who is authorized to implement any changes that will
impact the entire company. Roles and responsibilities in the IT department are shown in the following
table.
Directory Services
Currently, Litware, Inc., has two Windows NT 4.0 domains configured a shown in the Existing Domain
Model exhibit.
The New York domain contains user and computer accounts for both the New York and Boston offices.
The Chicago domain contains user and computer accounts for the Chicago office.
Litware, Inc., users require access only to project data for the customers to which they have been directly
assigned. They also require access to internal company resources, such as a time-building application
that is hosted in the New York office.
Accounting auditors and executives require access to data from all customer projects to perform
quarterly reports, account reviews, and billing verifications. Account auditors and executives are located
in both New York and Chicago offices, and frequently travel between offices.
Network Infrastructure
The existing network infrastructure is shown in the Existing Network Infrastructure exhibit.
All Internet access is provided through a proxy server located in the New York office. The proxy server
provides Internet name resolution on behalf of the client computers.
Currently, all servers run Windows NT Server 4.0 with the latest service pack installed. A time-billing
application is installed on a Microsoft SQL Server computer named SQL1. SQL1 is managed by the
network administrators in the New York office, and is accessed by all Litware, Inc., users.
The company??s servers, including their domain membership, physical locations, and network functions,
are shown in the following table.
Server name Domain Office Functions
DC1 New York New York PDC, DHCP server
DC2 New York New York BDC, WINS server
DC3 New York Boston BDC, DHCP server,
WINS
server
Member
server
Fileserver1 New York New York ,DHCP server, file
server
Fileserver2 New York New York Member server,
WINS server,
file
server
Fileserver3 Chicago Chicago Member server
DHCP server,
file
server
Fileserver4 Chicago Chicago Member server,
WINS server,
file
server
SQL1 New York New York Member server,
SQL Server
computer,
timebilling
application
server
Most required network resources are available locally.
All client computers in the company run Windows 2000 Professional.
Problem Statements
The following business problems must be considered:
? Contoso, Ltd., requires that the new Active Directory infrastructure is completely in place prior to
obtaining the contract.
? Administrative authority for network administrators in the New York and Chicago offices must
remain equal.
Chief Executive Officer
The addition of Contoso, Ltd., as a customer will likely increase annual revenue by 50 percent.
Additional funds and resources have been allocated to secure this contract. All efforts should be made to
demonstrate to the Contoso, Ltd., representatives that we will address all of their security concerns. This
will be done on part though a migration to the Windows Server 2003 Active Directory environment.
Any short-term costs associated with a technology deployment are acceptable if they allow for growth
and flexibility in the future.
Chief Information Officer
A Web-based interface for the time-billing application will be implemented in the near future. The
current network administrators in the New York and Chicago offices perform their jobs well.
To reduce the burden on IT staff, trusted individuals within the organization should be identified to help
reduce the IT administrative burden.
Office Worker
We want to be able to access the internal network from our home computers.
Business Drivers
The following business requirements must be considered:
? The company wants access to the network to remain easy and intuitive. A company policy now
states that user logon names and e-mail addresses should be identical. Currently, each user has an
e-mail address made up of that user??s first initial and last name, and an additional domain name
indicating the region that manages that user??s account. For example, the user Nicole Caron from
the New York office has the e-mail address of ncaron@ny.litwareinc.com. The user Luis Bonifaz
from Chicago has the e-mail address of lbonifaz@chi.litwareinc.com.
? The domain name litwareinc.com has been registered.
? To ensure reliability in the event of a single WAN link failure, users should continue to
authenticate on the network. Additionally, all domains should be fault tolerant in the event of a
single domain controller failure.
? VPN access will be provided to enable user access to customer data outside of regular business
hours. VPN connections will be assigned through the New York office.
Organizational Goals
The following organizational requirements must be considered:
? As part of the negotiations between Contoso, Ltd., and the New York office, Litware, Inc., has
agreed to ensure that all users who require access to Contoso, Ltd., data must have complex
passwords that are a minimum of 10 characters in length.
? The company has also agreed that management of Contoso, Ltd., data must be completely isolated
from all other Litware, Inc., data. This included the ability to manage security of Contoso, Ltd.,
resources. There will be no exceptions.
? Planning for other aspects of how Contoso, Ltd., will integrate with the Litware, Inc., environment
is premature at this point. However, a quick migration solution for the existing environment must
be identified to allow for this anticipated growth.
? Litware, Inc., account auditors and executives from the New York and Chicago offices will require
limited access to Contoso, Ltd., data.
Security
The following security requirements must be considered:
? A new Web-based interface will be implemented for the time-billing application running on SQL1.
This application will use IIS, and will require the use of IP filtering that uses computer host names
for security purposes.
? Only authorized computers within the internal Litware, Inc., network will be given access to the
time-billing application.
Active Directory
The following Active Directory requirements must be considered:
? The network administrators in the Chicago and New York offices will retain their current
responsibilities, such as the management of user accounts, servers, and domain controllers for
their regions. There should be no overlap between their administrative authority.
? There is a need to allow trusted individuals responsible for each customer project to manage user
account information. Responsibilities will include the ability to reset passwords and define
personal user information on user accounts, such as phone numbers and addresses. The trusted
individuals will be allowed to manage only user accounts within the customer project to which
they have been assigned.
Network Infrastructure
The following infrastructure requirements must be considered:
? Users in the Chicago office access Internet-based resources frequently. This Internet-related
traffic accounts for most of the bandwidth used between the Chicago and New York offices.
Bandwidth utilization between these two offices is currently a cause for concern. Network traffic
between the Chicago and New York offices must be minimized whenever possible.
? Because of the Boston office??s data access requirements, a high level of availability and reduced
latency between the New York and Boston offices is required. Bandwidth utilization between the
Boston and New York offices is minimal and is not a concern in the foreseeable future.
? A Windows Server 2003 computer will provide VPN access to the network by using both L2TP
and PPTP. Usage statistics will be gathered over time to identify which users establish VPN
connections to the network, and the duration of their connections. These usage statistics will help
the company track trends and plan for future growth.
? The network administrator in Chicago has extensive knowledge of DNS, and will manage the
implementation of the DNS infrastructure for the Litware. Inc., network.
? The DNS structure must be secured against any unauthorized modifications, but also must be easy
to maintain and manage.
Answer:

NO.8 You are designing a WAN implementation strategy to meet the business and technical requirements.
What should you do?
A.Configure a demand-dial router.
B.Create multiple Active Directory site links.
C.Configure a VPN connection between each branch office.
D.Install an Internet Authentication Service (IAS) server in each branch office.
Answer: A

Microsoft   70-297 test   70-297   70-297 demo

NO.9 You are designing the DNS infrastructure to meet the business and technical requirements. What
should you do?
A.Create an Active Directory-integrated zone on DC4. Set the replication scope to all DNS servers in the
domain.
B.Create an Active Directory-integrated zone on DC5. Set the replication scope to all DNS servers in the
forest.
C.Create an Active Directory-integrated zone on any domain controller in the forest root domain. Set the
replication scope to all domain controllers in the domain.
D.Create a standard primary zone on DC4.
E.Create a standard primary zone on any domain controller in the forest root domain
Answer: B

Microsoft practice test   70-297   70-297 test answers

NO.10 You are designing a DNS implementation strategy for the network. Which two zone types should you
use? (Each correct answer presents part of the solution. Choose two.)
A.reverse lookup zones
B.standard primary zones
C.standard secondary zones
D.Active Directory-integrated zones
Answer: A D

Microsoft original questions   70-297 dumps   70-297 exam simulations   70-297 exam simulations

NO.11 You are designing an IP addressing strategy for your VPN solution. How many public IP addresses
should you use?
A.1
B.25
C.50
D.255
Answer: A

Microsoft   70-297   70-297

NO.12 Exhibit, Existing Domain Model
Overview
Graphic Design Institute is a graphical design company that creates animated graphics for several
advertising companies and move theaters.
The hours of operation are 8:00 A.M. to 5:00 P.M., Monday through Friday.
Physical Locations
The company??s main office is located in Los Angeles. The company has five branch offices in the
following locations:
? Atlanta
? Dallas
? Denver
? New York
? San Francisco
The number of users in each office is shown in the following table.
Office Number of users
Los Angeles 550
Atlanta 300
Dallas 30
Denver 210
Planned Changes
To meet new security and customer requirements, the company wants to implement a Windows Server
2003 Active Directory environment.
Existing Environment
Business Processes
Graphic Design Institute consists of the following primary departments:
? Human Resources (HR)
? Finance
? Information Technology (IT)
? Advertising
? Movies
? Animation
The IT department is responsible for all network management.
Users often work on multiple projects at the same time. A strong administrative structure based on each
user??s office location and department is being used
Infrastructure
Directory Services
The existing domains and trust relationships are shown in the Existing Domain Model exhibit.
The company has one Windows 2000 domain located in the Los Angeles office. The name of the domain
is
graphicdesigninstitute.com. The domain is a Windows 20000 mixed-mode domain that contains Windows
2000 Server computers configured as domain controllers, Windows NT Server 4.0 computers configured
as BDCs, and Windows 2000 Server computers configured as member servers.
Currently, this domain is the only Active Directory domain. The domain consists of the following three
top-level OUs:
? Movies
? Animation
? Advertising
The default site configuration has been implemented in the existing Active Directory environment.
Problem statements
The following business problems must be considered:
? There is currently no enforcement of frequent password changes and logon hours.
? The ISP can only supply a single subnet, which consists of 32 IP addresses, for the Internet link.
? It is very difficult to manage users and groups and their necessary permissions.
? The finance and HR department cannot agree on a mutual security policy to implement.
? NetBIOS name resolution is saturating the WAN links.
Interviews
Chief Execute Offices
Graphic Design Institute has lost a number of contracts due to deadlines that have not been met.
Decreasing the amount of time we spend administering the network, along with increasing the amount of
time we spend on customers, is my primary reason for requesting the upgrade of the entire network.
Funds are available for critical hardware requirements. I do not want any downtime for users. I also
want strict business hours enforced. Employees should not be at the office or work from home outside
normal business hours.
Chief Information Officer
Currently, we have problems as a result of all the merges and acquisitions. I want all the servers to be
installed with Windows Server 2003 to resolve these problems. I also want all client computers upgraded
to Windows XP Professional over the next two years.
The current IT response level is leading to a lot of lost production hours. Each office will continue to
manage its own users and computers, with the exception of the finance and HR departments, which have
their own requirements. We need to ensure that no production time is lost as a result of an interruption
in the network connectivity.
Network Administrator
We are currently expected to resolve issues within 24 hours, although this sometimes is not achieved.
Because most high-level administrative work can only be done when users are not in the office, network
administrators often work after hours or on weekends.
Domain administrators are responsible for managing the private IP addresses of every computer that
belongs to their respective domains.
Help desk staff exists in each branch office to assist users with software-related problems, as well as with
basic network problems. Each domain has its own help desk staff with personnel located in each office. In
the future, the help desk staff will be responsible for resetting passwords if users forget them.
Office Worker
Only selected users have Internet access. This prevents us from remaining competitive because we
cannot
perform the necessary research about new technologies or software available.
Business Requirements
Business Drivers
The following business requirements must be considered:
? A single internal namespace is required to minimize administrative effort.
? A Web site exists outside the firewall to provide company contact information.
Organizational Goals
The following organizational requirements must be considered:
? The new design must accommodate the finance and HR departments, which have requirements
not addressed by the company??s planned password policy.
? All computers must have the latest service packs and hot fixes installed. In addition, computers in
the advertising department must be updated to have the latest versions of graphics and audio
drivers installed.
Security
The following security requirements must be considered:
? Specific security groups must be set up to address security requirements.
? Security must be based on departments and groups of individuals within the departments.
? Users in the finance department need access to payroll information on a server named Payroll,
which is located in the HR department.
Customer Requirements
The following customer requirements must be considered:
? A new service-level agreement that requires a response from the IT department to users within
one hour must go into effect.
? Personal information about employees must remain secure.
? All client computers, regardless of office location, must be able to access all other computers.
Technical Requirements
Active Directory
The following Active Directory requirements must be considered:
? The company requires a new Active Directory environment that enables the security requirements
of various departments to be met. This must be accomplished by installing a Windows Server 2003
on all domain controllers.
? A completely decentralized administrative approach will be used. Each group of administrators
will be responsible for its own departmental environment.
? Only one operations master role will be allowed per domain controller. This is required for fault
tolerance.
? DNS replication of the forest root domain must be limited to forest domain controllers only.
Network Infrastructure
The following infrastructure requirements must be considered:
? A new Routing and Remote Access solution must be installed:
? A DHCP solution that is fault tolerant within each office must be implemented
? All WAN links must be fault tolerant
? Name resolution must be localized on the local network
Answer:
11. You are designing an Active Directory forest structure to meet the business and technical
requirements. What should you do?
A.Create a single forest that has one domain. Use organizational units (OUs) to separate the
departments.
B.Create a single forest that has multiple domains to represent every department.
C.Create a single forest that has three domains: one for finance, one for HR, and one for the remaining
departments.
D.Create multiple forests that has a single domain in each forest to represent the departments.
Answer: C

Microsoft certification training   70-297   70-297 certification training

NO.13 You are designing the top-level organizational unit (OU) structure to meet the administrative
requirements. What should you do?
A.Create a top-level OU named New York. Place all user and computer accounts from New York in the
New York OU.
B.Create a top-level OU named Chicago. Place all user and computer accounts from Chicago in the
Chicago OU.
C.Create a top-level OU named Coho. Place all user and computer accounts that are assigned to the
Coho Vineyard customer project in the Coho OU.
D.Create a top-level OU named Sales. Place all user and computer accounts from the sales department
in the Sales OU.
Answer: C

Microsoft study guide   70-297 braindump   70-297 braindump

NO.14 You need to identify the number of servers that will be used specifically for operations master roles.
How many servers should you recommend?
A.5
B.11
C.14
D.17
E.20
Answer: B

Microsoft test questions   70-297   70-297 exam prep   70-297

NO.15 You are designing a forest and domain structure to address the concerns of Contoso, Ltd., and to meet
the business and technical requirements. You want to use the minimum number of domains and forests
that are required. Which domain structure should you use?
A.one forest and two domains
B.one forest and three domains
C.one forest and four domains
D.two forests and three domains
E.two forests and four domains
Answer: E

Microsoft   70-297   70-297 test questions   70-297

NO.16 You are designing an Active Directory implementation strategy to present to executives from your
company and from Contoso, Ltd. Which implementation strategy should you use?
A.Upgrade the New York domain. Upgrade the Chicago domain. Create a pristine forest for Contoso, Ltd.
B.Create a pristine forest. Upgrade the New York domain. Upgrade the Chicago domain. Do nothing
further.
C.Create a pristine forest. Upgrade the New York domain. Upgrade the Chicago domain. Create a pristine
forest for Contoso, Ltd.
D.Create a pristine forest. Upgrade the New York domain. Upgrade the Chicago domain. Create a new
child domain for Contoso, Ltd.
Answer: C

Microsoft demo   70-297 certification   70-297 test   70-297

NO.17 ou are designing a DHCP strategy to meet the business and technical requirements. What should you
do?
A.Install one DHCP server in each branch office and one DHCP server in Los Angeles.
B.Install one DHCP server in each branch office and two DHCP servers in Los Angeles.
C.Install two DHCP servers in each branch office and one DHCP server in Los Angeles.
D.Install two DHCP servers in each branch office and two DHCP servers in Los Angeles.
Answer: D

Microsoft   70-297 answers real questions   70-297 pdf

NO.18 You are designing a NetBIOS name resolution strategy to meet the business and technical
requirements. What should you do?
14You are designing a pass
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.Delegate the password management controls to the help desk staff.
B.Delegate
C.Configure the Default Domain Policy to enforce password expiration settings.
D.Configure the Default Domain Controller Policy to enforce password expiration settings.
Answer: B D

Microsoft exam dumps   70-297 test questions   70-297 original questions   70-297
15.You are de
you do?
A.Create a Group Policy object (GPO) and link it to the Denver site.
B.Create a Group Policy object (GPO) and link it to the Advertising OU.
C.Create a Group
D.Configure the Default Domain Policy to have the No Override option.
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
advertising dep
Answer: B

Microsoft test answers   70-297   70-297   70-297 test   70-297
16.You are designing a NetBIOS name resolution strategy to meet the business and technical
requirements. What should you do?
14You are designing a pass
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.Delegate the password management controls to the help desk staff.
B.Delegate the password management controls to the Domain Users group.
C.Configure the Default Domain Policy to enforce password expiration settings.
D.Configure the Default Domain Controller Policy to enforce password expiration settings.
Answer: B D

Microsoft   70-297 questions   70-297 questions   70-297 answers real questions   70-297
15.You are designing a strategy to address the requirements of the advertising department. What should
A.Create a Group Policy object (GPO) and link it to the Denver site.
B.Create a Group Policy object (GPO) and link it to the Advertising OU.
C.Create a Group Policy object (GPO) and link it to the graphicdesigninstitute.com domain.
D.Configure the Default Domain Policy to have the No Override option.
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
advertising department.
16.You are designing a NetBIOS name resolution strategy to meet the business and technical
requirements. What should you do?
14You are designing a password management solution to meet the business and technical requirements.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.Delegate the password management controls to the help desk staff.
the password management controls to the Domain Users group.
C.Configure the Default Domain Policy to enforce password expiration settings.
D.Configure the Default Domain Controller Policy to enforce password expiration settings.
signing a strategy to address the requirements of the advertising department. What should
A.Create a Group Policy object (GPO) and link it to the Denver site.
B.Create a Group Policy object (GPO) and link it to the Advertising OU.
Policy object (GPO) and link it to the graphicdesigninstitute.com domain.
D.Configure the Default Domain Policy to have the No Override option.
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
artment.
16.You are designing a NetBIOS name resolution strategy to meet the business and technical
requirements. What should you do?
word management solution to meet the business and technical requirements.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.Delegate the password management controls to the help desk staff.
the password management controls to the Domain Users group.
C.Configure the Default Domain Policy to enforce password expiration settings.
D.Configure the Default Domain Controller Policy to enforce password expiration settings.
signing a strategy to address the requirements of the advertising department. What should
A.Create a Group Policy object (GPO) and link it to the Denver site.
B.Create a Group Policy object (GPO) and link it to the Advertising OU.
Policy object (GPO) and link it to the graphicdesigninstitute.com domain.
D.Configure the Default Domain Policy to have the No Override option.
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
16.You are designing a NetBIOS name resolution strategy to meet the business and technical
requirements. What should you do?
The safer , easier way to help you pass any IT exams.
14 / 16
word management solution to meet the business and technical requirements.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.Delegate the password management controls to the help desk staff.
the password management controls to the Domain Users group.
C.Configure the Default Domain Policy to enforce password expiration settings.
D.Configure the Default Domain Controller Policy to enforce password expiration settings.
signing a strategy to address the requirements of the advertising department. What should
A.Create a Group Policy object (GPO) and link it to the Denver site.
B.Create a Group Policy object (GPO) and link it to the Advertising OU.
Policy object (GPO) and link it to the graphicdesigninstitute.com domain.
D.Configure the Default Domain Policy to have the No Override option.
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
16.You are designing a NetBIOS name resolution strategy to meet the business and technical
The safer , easier way to help you pass any IT exams.
word management solution to meet the business and technical requirements.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.Delegate the password management controls to the help desk staff.
the password management controls to the Domain Users group.
C.Configure the Default Domain Policy to enforce password expiration settings.
D.Configure the Default Domain Controller Policy to enforce password expiration settings.
signing a strategy to address the requirements of the advertising department. What should
A.Create a Group Policy object (GPO) and link it to the Denver site.
B.Create a Group Policy object (GPO) and link it to the Advertising OU.
Policy object (GPO) and link it to the graphicdesigninstitute.com domain.
D.Configure the Default Domain Policy to have the No Override option.
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
16.You are designing a NetBIOS name resolution strategy to meet the business and technical
The safer , easier way to help you pass any IT exams.
word management solution to meet the business and technical requirements.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A.Delegate the password management controls to the help desk staff.
the password management controls to the Domain Users group.
C.Configure the Default Domain Policy to enforce password expiration settings.
D.Configure the Default Domain Controller Policy to enforce password expiration settings.
signing a strategy to address the requirements of the advertising department. What should
B.Create a Group Policy object (GPO) and link it to the Advertising OU.
Policy object (GPO) and link it to the graphicdesigninstitute.com domain.
D.Configure the Default Domain Policy to have the No Override option.
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
16.You are designing a NetBIOS name resolution strategy to meet the business and technical
The safer , easier way to help you pass any IT exams.
word management solution to meet the business and technical requirements.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
D.Configure the Default Domain Controller Policy to enforce password expiration settings.
signing a strategy to address the requirements of the advertising department. What should
Policy object (GPO) and link it to the graphicdesigninstitute.com domain.
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
16.You are designing a NetBIOS name resolution strategy to meet the business and technical
The safer , easier way to help you pass any IT exams.
word management solution to meet the business and technical requirements.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
signing a strategy to address the requirements of the advertising department. What should
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
16.You are designing a NetBIOS name resolution strategy to meet the business and technical
word management solution to meet the business and technical requirements.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
signing a strategy to address the requirements of the advertising department. What should
E.Use block inheritance to prevent the Group Policy object (GPO) from applying to members of the
16.You are designing a NetBIOS name resolution strategy to meet the business and technical
A.Install one WINS server in each branch office. Configure the WINS servers to use push/pull replication
with the WINS server in Los Angeles. Configure all computers to have the IP address of the local WINS
server.
B.Install two additional WINS servers in Los Angeles. Configure the WINS servers to use push/pull
replication. Configure all computers to have the IP addresses of the WINS servers.
C.Install the DNS Server service on one domain controller in each branch office. Configure the DNS
servers to forward all unanswered queries to the WINS server. Configure all computers to have the IP
addresses of the DNS servers.
D.Configure the DNS servers in each branch office to forward all unanswered queries to a local WINS
server. Configure all computers to have the IP addresses of the DNS server in the
graphicdesigninstitute.com forest root.
Answer: A

Microsoft   70-297   70-297   70-297   70-297 study guide

NO.19 You are designing a security group strategy to meet the business and technical requirements. What
should you do?
A.Create one global group named G_Executives. Make all executive user accounts members of that
group.
B.Create two global groups named G_Executives and one universal group named U_Executives. Make
the two global groups members of U_Executives. Make the executive user accounts members of the
appropriate global group.
C.Create three global groups named G_NY_Executives and G_Chi_Executives and G_Executives. Make
G_NY_Executives and G_Chi_Executives members of G_Executives. Make the executive user accounts
members of the appropriate global group.
D.Create one domain local group named DL_Executives. Make all executive user accounts members of
that group.
Answer: B

Microsoft certification   70-297 study guide   70-297   70-297   70-297

NO.20 You are designing a strategy to provide Internet access to all users. What should you do?
A.Configure Internet Connection Sharing on all client computers.
B.Configure Automatic Private IP Addressing (APIPA) on all client computers.
C.Configure one server as a Routing and Remote Access VPN server.
D.Configure one server as a Routing and Remote Access NAT router.
Answer: D

Microsoft answers real questions   70-297   70-297   70-297   70-297 answers real questions   70-297

ITCertMaster offer the latest HP2-E59 Practice Test and high-quality HP0-S34 PDF Exam Questions training material. Our DC0-260 VCE testing engine and 642-980 dumps can help you pass the real exam. High-quality HP2-B111 Exam Questions & Answers can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertmaster.com/70-297.html

Latest training guide for Microsoft 70-293

ITCertMaster has a huge team of IT experts, who continue to use their knowledge and experience to study a lot of IT certification examination papers of past few years. Their findings of the research is now the product of ITCertMaster, therefore ITCertMaster's Microsoft 70-293 practice questions are very similar with the real exam, which can help a lot of people to realize their dreams. ITCertMaster can ensure you to successfully pass the exam, and you can boldly Add ITCertMaster's products to your shopping cart. With ITCertMaster your dreams can be achieved immediately.

ITCertMaster can not only save you valuable time, but also make you feel at ease to participate in the exam and pass it successfully. ITCertMaster has good reliability and a high reputation in the IT professionals. You can free download the part of Microsoft 70-293 exam questions and answers ITCertMaster provide as an attempt to determine the reliability of our products. I believe you will be very satisfied of our products. I have confidence in our ITCertMaster products that soon ITCertMaster's exam questions and answers about Microsoft 70-293 will be your choice and you will pass Microsoft certification 70-293 exam successfully. It is wise to choose our ITCertMaster and ITCertMaster will prove to be the most satisfied product you want.

If you want to buy Microsoft 70-293 exam study guide online services, then we ITCertMaster is one of the leading service provider's site. . These training products to help you pass the exam, we guarantee to refund the full purchase cost. Our website provide all the study materials and other training materials on the site and each one enjoy one year free update facilities. If these training products do not help you pass the exam, we guarantee to refund the full purchase cost.

ITCertMaster's practice questions and answers about the Microsoft certification 70-293 exam is developed by our expert team's wealth of knowledge and experience, and can fully meet the demand of Microsoft certification 70-293 exam's candidates. From related websites or books, you might also see some of the training materials, but ITCertMaster's information about Microsoft certification 70-293 exam is the most comprehensive, and can give you the best protection. Candidates who participate in the Microsoft certification 70-293 exam should select exam practice questions and answers of ITCertMaster, because ITCertMaster is the best choice for you.

ITCertMaster Microsoft 70-293 exam questions and answers provide you test preparation information with everything you need. About Microsoft 70-293 exam, you can find these questions from different web sites or books, but the key is logical and connected. Our questions and answers will not only allow you effortlessly through the exam first time, but also can save your valuable time.

Microsoft 70-293 exam materials of ITCertMaster is devoloped in accordance with the latest syllabus. At the same time, we also constantly upgrade our training materials. So our exam training materials is simulated with the practical exam. So that the pass rate of ITCertMaster is very high. It is an undeniable fact. Through this we can know that ITCertMaster Microsoft 70-293 exam training materials can brought help to the candidates. And our price is absolutely reasonable and suitable for each of the candidates who participating in the IT certification exams.

Exam Code: 70-293
Exam Name: Microsoft (Planning and Maintaining a Microsoft Windows Server 2003 Network Infrastructure)
Guaranteed success with practice guides, No help, Full refund!
290 Questions and Answers
Updated: 2013-12-29

70-293 Free Demo Download: http://www.itcertmaster.com/70-293.html

NO.1 You are the administrator for your company. The company has a new server which runs Windows
Server 2003 named Server1.
Server1 has two network connections. Internet connection is used to connect to the Internet and Local
Area Network connection is used to connect to the company network.
You need to ensure that company users can access the Internet through Server1. You also need to
prevent external, unauthorized users from accessing Server1 through the Internet. You must accomplish
this task by using the Routing and Remote Access Server Setup Wizard dialog box. Your operation must
not affect other settings on Server1.
Answer.CP1 AND CP2 AND CP3 AND CP4
Step #1.
Open the Routing and Remote Access console by clicking Start > Administrative Tools > Routing and
Remote Access.
Step #2.
Right click on Server1 and select Configure and Enable Routing and Remote Access.
Step #3.
The Routing and Remote Access Setup Wizard will open. Click Next.
Step #4.
Select Network address translation (NAT) and click Next.
Step #5.
Select "Internet Connection" as the public interface. Ensure that the "Enable security on the selected
interface...." checkbox is ticked. Then click Next.
Step #6.
Click Finish to close the wizard.
Step #7.
Close the Routing and Remote Access console.

NO.2 You are a network administrator for a consulting company. You need to create a wireless network that
will be used by consultants from your company at a customer location. The wireless network will consist of
nine portable computers, three servers, and four wireless digital cameras. All computers and cameras can
use either static or dynamic IP addressing. The cameras do not support data encryption. Both the portable
computers and the servers must be able to initiate communication over the Internet to VPN servers in
your company's main data center. Only the wireless access point is connected to the customer's
corporate network.You need to plan the wireless IP network so that it minimizes the risk of unauthorized
use of the wireless network and prevents unsolicited communication from the Internet to the hosts on the
network.What should you do?To answer, drag the appropriate configuration settings to the Wireless
Network Configuration.
Answer:

NO.3 You are the network administrator for Tailspin Toys. The company has a main office and two branch
offices. The network in the main office contains 10 servers and 100 client computers. Each branch office
contains 5 servers and 50 client computers. Each branch office is connected to the main office by a direct
T1 line. The network design requires that company IP addresses must be assigned from a single classful
private IP address range. The network is assigned a class C private IP address range to allocate IP
addresses for servers and client computers. Tailspin Toys acquires a company named Wingtip Toys. The
acquisition will increase the number of servers to 20 and the number of client computers to 200 in the
main office. The acquisition is expected to increase the number of servers to 20 and the number of client
computers to 200 in the branch offices. The acquisition will also add 10 more branch offices. After the
acquisition, all branch offices will be the same size. Each branch office will be connected to the main
office by a direct T1 line. The new company will follow the Tailspin Toys network design requirements. You
need to plan the IP addressing for the new company. You need to comply with the network design
requirement. What should you do?
A. Assign the main office and each branch office a new class A private IP address range.
B. Assign the main office and each branch office a new class B private IP address range.
C. Assign the main office and each branch office a subnet from a new class B private IP address range.
D.Assign the main office and each branch office a subnet from the current class C private IP address
range.
Answer: C

Microsoft questions   70-293   70-293 braindump   70-293   70-293

NO.4 You are the network administrator for your company. The network consists of a single Active Directory
domain. The network contains 10 domain controllers and 50 servers in application server roles. All
servers run Windows Server 2003. The application servers are configured with custom security settings
that are specific to their roles as application servers. Application servers are required to audit account
logon events, object access events, and system events. Application servers are required to have
passwords that meet complexity requirements, to enforce password history, and to enforce password
aging. Application servers must also be protected against man-in-the-middle attacks during authentication.
You need to deploy and refresh the custom security settings on a routine basis. You also need to be able
to verify the custom security settings during audits. What should you do?
A. Create a custom security template and apply it by using Group Policy.
B. Create a custom IPSec policy and assign it by using Group Policy.
C. Create and apply a custom Administrative Template.
D. Create a custom application server image and deploy it by using RIS.
Answer: A

Microsoft pdf   70-293   70-293 exam simulations

NO.5 You are the network administrator for your company. The network consists of a single Active Directory
domain. The company's written security policy requires that computers in a file server role must have a
minimum file size for event log settings. In the past, logged events were lost because the size of the event
log files was too small. You want to ensure that the event log files are large enough to hold history. You
also want the security event log to be cleared manually to ensure that no security information is lost. The
application log must clear events as needed. You create a security template named Fileserver.inf to meet
the requirements. You need to test each file server and take the appropriate corrective action if needed.
You audit a file server by using Fileserver.inf and receive the results shown in the exhibit. (Click the
Exhibit button.) You want to make only the changes that are required to meet the requirements. Which two
actions should you take? (Each correct answer presents part of the solution. Choose two.)
A. Correct the Maximum application log size setting on the file server.
B. Correct the Maximum security log size setting on the file server.
C. Correct the Maximum system log size setting on the file server.
D. Correct the Retention method for application log setting on the file server.
E. Correct the Retention method for security log setting on the file server.
F. Correct the Retention method for system log setting for the file server.
Answer: B E

Microsoft certification   70-293 pdf   70-293   70-293 study guide

NO.6 You are a network administrator for your company. All servers run Windows Server 2003. All client
computers run Windows XP Professional.
All client computers receive their TCP/IP configuration information from the DHCP server named Server1.
You discover that client computers get a new IP address every time they are restarted.
You need to ensure that client computers receive the same IP address as often as possible regardless of
a system restart. You must accomplish this task by using the DHCP console. Your operation must not
affect other settings.
Answer.(CP1 OR CP2) AND CP3
We need to change the lease time to "Unlimited".
Step #1.
Open the DHCP console by clicking Start > Administrative Tools > DHCP.
Step #2.
Expand the tree.
Step #3.
Right click on Scope1 and select Properties.
Step #4.
Select Unlimited then click Apply and OK.
Step #5.
Close the DHCP console.

NO.7 You are a network administrator for your company. The network consists of a single Active Directory
forest that contains three domains. The functional level of the forest and of all three domains is Window
Server 2003. The company has a main office and 30 branch offices. Each branch office is connected to
the main office by a 56-Kbps WAN connection.
You configure the main office and each branch office as a separate Active Directory site. You deploy a
Windows Server 2003 domain controller at the main office and at each branch office. Each domain
controller is configured as a DNS server.
You can log on to the network from client computers in the branch offices at any time. However, users in
the branch offices report that they cannot log on to the network during peak hours.
You need to allow users to log on to the network from branch office computers. You do not want to affect
the performance of the branch office domain controllers. You need to minimize Active Directory replication
traffic across the WAN connections.
What should you do?
A.Use Active Directory Sites and Services to enable universal group membership caching for each branch
office site.
B.Use the DNS console to configure the branch office DNS servers to forward requests to a DNS server in
the main office.
C.Use Active Directory Sites and Services to configure each branch office domain controller as a global
catalog server.
D.Use the DNS console to configure the branch office DNS servers to use an Active Directory-integrated
zone.
Answer:A

Microsoft exam simulations   70-293   70-293   70-293 practice test

NO.8 You are the network administrator for your company. The network contains an application server
running Windows Server 2003.
Users report that the application server intermittently responds slowly. When the application server is
responding slowly, requests that normally take 1 second to complete take more than 30 seconds to
complete. You suspect that the slow server response is because of high broadcast traffic on the network.
You need to plan how to monitor the application server and to have a message generated when
broadcast traffic is high. You also want to minimize the creation of false alarms when nonbroadcast traffic
is high.
What should you do?
A.Use the Alerts option in the Performance Logs and Alerts snap-in to configure an alert to trigger when
the Datagrams/sec counter in the UDPv4 object is high.
B.Use System Monitor and configure it to monitor the Segments/sec counter in the TCPv4 object.
C.Use System Monitor and configure it to monitor the Datagrams/sec counter in the UDPv4 object.
D.Use the Alerts option in the Performance Logs and Alerts snap-in to configure an alert to trigger when
the Datagrams/sec counter in the TCPv4 object is high.
Answer:A

Microsoft   70-293 test answers   70-293   70-293

NO.9 You are a network administrator for your company. The network contains a Windows Server 2003
computer named Server1 and ten Windows XP Professional client computers.
You configure Server1 with a LAN connection named Local Area Connection and an Internet connection
named Internet Connection. All of the client computers are connected to the LAN.
The users report that they cannot connect to the Internet. You discover that the IP configuration on the
client computers is correct.
You need to provide the ten client computers with Internet access. You must accomplish these tasks by
using the Server1's Network Connections console with the least amount of administrative effort. Your
operations must not affect other settings on Server1.
Answer.CP1 AND CP2
We need to enable Internet Connection Sharing (ICS) on the adapter named Internet Connection.
Step #1.
Open the Network Connections console by clicking Start > Control Panel > Network Connections.
Step #2.
Right click on Internet Connection and select Properties.
Step #3.
Click the Advanced tab.
Step #4.
Tick the checkbox to enable Internet Connection Sharing then click OK.
Step #5.
Click Yes.

NO.10 You are a network administrator for your company. The network consists of a single Active Directory
domain named treyresearch.com. All servers run Windows Server 2003. All client computers run
Windows XP Professional.
The company has two DNS servers named Server1 and Server2. Server1 hosts the primary DNS zone for
treyresearch.com. Server2 provides name resolution for the external Internet name of the company on the
Internet and is configured with root hints.
Client computers are configured to use Server1 as their only DNS server.
Users report that they cannot access Web sites on the Internet.
You need to ensure that the client computers can access Internet-based sites. You must accomplish this
task by using Server1's DNS console with the least amount of administrative effort. Your operation must
not affect other settings on Server1.
Answer.CP1 AND CP2
DNS console -> Server -> Properties -> Forwarders, 'All other DNS domains' to IP address for Server2.

NO.11 You are a network administrator for your company. The network consists of a single Active Directory
domain. All servers run Windows Server 2003.
All file servers for the Sales department are located in an organizational unit (OU) named SaleServers. All
file servers for the Accounting department are located in an OU named AccountServers.
You create a Group Policy Object (GPO) named SaleServersPolicy and link it to the SaleServers OU. You
create a GPO named AccountServersPolicy and link it to the AccountServers OU.
You need to ensure that only the AccountServersPolicy settings are applied to the AccountServers OU.
You must accomplish this task by using the Active Directory Users and Computers console. Your
operation must not affect other settings.
Answer.CP1 AND CP2
Step #1.
Open Active Directory Users and Computers by clicking Start > Administrative Tools > Active Directory
Users and Computers.
Step #2.
Expand the tree to show the Organizations Units (OUs). Right click on the AccountServers OU and select
Properties.
Step #3.
Go to the Group Policy tab.
Step #4.
Tick the Block Policy Inheritance checkbox then click Apply and OK.
Step #5.
Close Active Directory Users and Computers.

NO.12 You are a network administrator for your company. The company has a main office and one branch
office. The network consists of a single Active Directory domain. All servers run Windows Server 2003.
The company needs to connect the main office network and the branch office network by using Routing
and Remote Access servers at each office. The networks will be connected by a VPN connection over the
Internet.
The company's written security policy includes the following requirements for VPN connections over the
Internet:
All data must be encrypted with end-to-end encryption.
VPN connection authentication must be at the computer level.
Credential information must not be transmitted over the Internet as part of the authentication process.
You need to configure security for VPN connection between the main office and the branch office. You
need to comply with the written security policy.
What should you do?
A.Use a PPTP connection with EAP-TLS authentication.
B.Use a PPTP connection with MS-CHAP v2 authentication.
C.Use an L2TP connection with EAP-TLS authentication.
D.Use an L2TP connection with MS-CHAP v2 authentication.
Answer:C

Microsoft   70-293 braindump   70-293 exam prep

NO.13 You are the network administrator for your company. All servers run Windows Server 2003. You
configure a baseline security template named Baseline.inf. Several operations groups are responsible for
creating templates containing settings that satisfy operational requirements. You receive the templates
shown in the following table.
The operations groups agree that in the case of conflicting settings, the priority order listed in the following
table establishes the resultant setting.
You need to create one or more Group Policy objects (GPOs) to implement the security settings. You want
to minimize the amount of administrative effort required when changes are requested by the various
operations groups. What should you do?
A. Create a GPO and import the following templates in the following order. Baseline.inf, Sec.inf. Create a
GPO for each server role and import only the specific template for that role into each respective GPO.
B. Create a GPO and import the following templates in the following order. Sec.inf, Baseline.inf. Create a
GPO for each server role and import only the specific template for that role into each respective GPO.
C. Create a GPO for each server role and import the following templates in the following order.
Baseline.inf, specific server role template, Sec.inf.
D.Create a GPO and import the following templates in the following order. Sec.inf, Db.inf, File.inf,
Baseline.inf.
Answer: A

Microsoft   70-293 answers real questions   70-293 exam   70-293   70-293 exam

NO.14 You are the network administrator for your company. The network consists of a single Active Directory
domain. The functional level of the domain is Windows Server 2003. The domain contains an
organizational unit (OU) named Servers that contains all of the company's Windows Server 2003
resource servers. The domain also contains an OU named Workstations that contains all of the
company's Windows XP Professional client computers. You configure a baseline security template for
resource servers named Server.inf and a baseline security template for client computers named
Workstation.inf. The Server.inf template contains hundreds of settings, including file and registry
permission settings that have inheritance propagation enabled. The Workstation.inf template contains 20
security settings, none of which contain file or registry permissions settings. The resource servers operate
at near capacity during business hours. You need to apply the baseline security templates so that the
settings will be periodically enforced. You need to accomplish this task by using the minimum amount of
administrative effort and while minimizing the performance impact on the resource servers. What should
you do.?
A. Create a Group Policy object (GPO) and link it to the domain. Import both the Server.inf and the
Workstation.inf templates into the GPO.
B. Import both the Server.inf and the Workstation.inf templates into the Default Domain Policy Group
Policy object (GPO).
C. On each resource server, create a weekly scheduled task to apply the Server.inf settings during
off-peak hours by using the secedit command. Create a Group Policy object (GPO) and link it to the
Workstations OU. Import the Workstation.inf template into the GPO.
D. On each resource server, create a weekly scheduled task to apply the Server.inf settings during
off-peak hours by using the secedit command. Import the Workstation.inf template into the Default
Domain Policy Group Policy object (GPO).
Answer: C

Microsoft exam dumps   70-293   70-293   70-293 exam prep

NO.15 You are the systems engineer for Contoso, Ltd. The internal network consists of a Windows NT 4.0
domain. The company maintains a separate network that contains publicly accessible Web and mail
servers. These Web and mail servers are members of a DNS domain named contoso.com. The
contoso.com zone is hosted by a UNIX-based DNS server running BIND 4.8.1.
Contoso, Ltd., is planning to migrate to a Windows Server 2003 Active Directory domain-based network.
The migration plan states that all client computers will be upgraded to Windows XP Professional and that
all servers will be replaced with new computers running Windows Server 2003.
The migration plan specifies the following requirements for DNS in the new environment:
Active Directory data must not be accessible from the Internet.
The DNS namespace must be contiguous to minimize confusion for users and administrators.
Users must be able to connect to resources in the contoso.com domain.
Users must be able to connect to resources located on the Internet.
The existing UNIX-based DNS server will continue to host the contoso.com domain.
The existing UNIX-based DNS server cannot be upgraded or replaced.
You plan to install a Windows Server 2003 DNS server on the internal network.
You need to configure this Windows-based DNS server to meet the requirements specified in the
migration plan.
What should you do?
A.Create a primary zone named ad.contoso.com on your Windows-based DNS server. Create a
delegation record for the new zone on the UNIX-based DNS server. Configure forwarders on your
Windows-based DNS server.
B.Create a primary zone named ad.contoso.com on the UNIX-based DNS server. Create a secondary
zone on your Windows-based DNS server for the ad.contoso.com domain.
C.Create a primary zone named contoso-ad.com on your Windows-based DNS server. Create a
secondary zone on the UNIX-based DNS server for the contoso-ad.com domain.
D.Create a primary zone named contoso-ad.com on the UNIX-based DNS server. Create a stub zone on
the Windows-based DNS server for the contoso-ad.com domain. Configure conditional forwarders on
your Windows-based DNS server for the contoso-ad.com and contoso.com domains.
Answer:A

Microsoft   70-293 pdf   70-293 test   70-293   70-293

NO.16 You are the network administrator for your company. The network consists of a single Active Directory
domain. The network contains two Windows Server 2003 domain controllers, two Windows 2000 Server
domain controllers, and two Windows NT Server 4.0 domain controllers.
All file servers for the finance department are located in an organizational unit (OU) named Finance
Servers. All file servers for the payroll department are located in an OU named Payroll Servers. The
Payroll Servers OU is a child OU of the Finance Servers OU.
The company's written security policy for the finance department states that departmental servers must
have security settings that are enhanced from the default settings. The written security policy for the
payroll department states that departmental servers must have enhanced security settings from the
default settings, and auditing must be enabled for file or folder deletion.
You need to plan the security policy settings for the finance and payroll departments.
What should you do?
A.Create a Group Policy object (GPO) to apply the Compatws.inf security template to computer objects,
and link it to the Finance Servers OU.
Create a second GPO to enable the Audit object access audit policy on computer objects, and link it to the
Payroll Servers OU.
B.Create a Group Policy object (GPO) to apply the Securews.inf security template to computer objects,
and link it to the Finance Servers OU.
Create a second GPO to enable the Audit object access audit policy on computer objects, and link it to the
Payroll Servers OU.
C.Create a Group Policy object (GPO) to apply the Compatws.inf security template to computer objects,
and link it to the Finance Servers OU.
Create a second GPO to apply the Hisecws.inf security template to computer objects, and link it to the
Payroll Servers OU.
D.Create a Group Policy object (GPO) to apply the Securews.inf security template to computer objects,
and link it to the Finance Servers and to the Payroll Servers OUs.
Create a second GPO to enable the Audit object access audit policy on computer objects, and link it to the
Payroll Servers OU.
Answer:B

Microsoft   70-293   70-293

NO.17 You are the network administrator for your company. The network consists of a single Active Directory
domain. All servers run Windows Server 2003.
The network contains servers that have Terminal Server enabled. The terminal servers host legacy
applications that currently require users to be members of the Power Users group.
A new requirement in the company's written security policy states that the Power Users group must be
empty on all resource servers.
You need to maintain the ability to run the legacy applications on the terminal servers when the new
security requirement is implemented.
What should you do?
A. Add the Domain Users global group to the Remote Desktop Users built-in group in the domain.
B. Add the Domain Users global group to the Remote Desktop Users local group on each terminal server.
C. Modify the Compatws.inf security template settings to allow members of the local Users group to run
the applications. Import the security template into the Default Domain Controllers Policy Group Policy
object (GPO).
D. Modify the Compatws.inf security template settings to allow members of the local Users group to run
the applications. Apply the modified template to each terminal server.
Answer: D

Microsoft   70-293 practice test   70-293 original questions   70-293 pdf   70-293 exam

NO.18 You are the network administrator for your company. The network consists of a single Active Directory
domain. All servers run Windows Server 2003.
When the network was designed, the design team set design specifications. After the network was
implemented, the deployment team set baseline specifications. The specifications for broadcast traffic
are:
The design specification requires that broadcast traffic must be 5 percent or less of total network traffic.
The baseline specification showed that the broadcast traffic is always 1 percent or less of total network
traffic during normal operation.
You need to monitor the network traffic and find out if the level of broadcast traffic is within design and
baseline specifications. You decide to use Network Monitor. After monitoring for 1 hour, you observe the
results shown in the exhibit. (Click the Exhibit button.)
You need to report the results of your observations to management.
Which two actions should you take? (Each correct answer presents part of the solution. Choose two.)
A.Report that broadcast traffic is outside of the baseline specification.
B.Report that broadcast traffic is outside of the design specification.
C.Report that broadcast traffic is within the design specification.
D.Report that broadcast traffic is within the baseline specification.
Answer:A,B

Microsoft   70-293 exam simulations   70-293 exam   70-293

NO.19 You are the network administrator for your company. The network contains Windows Server 2003
computers and Windows XP Professional computers.
The company deploys two DNS servers. Both DNS servers run Windows Server 2003. One DNS server is
inside of the corporate firewall, and the other DNS server is outside of the firewall. The external DNS
server provides name resolution for the external Internet name of the company on the Internet, and it is
configured with root hints. The internal DNS server hosts the DNS zones related to the internal network
configuration, and it is not configured with root hints.
You want to limit the exposure of the client computers to DNS-related attacks from the Internet, without
limiting their access to Internet-based sites.
Which two actions should you take? (Each correct answer presents part of the solution. Choose two.)
A.Configure the client computers to use only the internal DNS server.
B.Configure the client computers to use both DNS servers. List the internal DNS server first.
C.Configure the firewall to allow only network traffic on the DNS ports.
D.On the internal DNS server, disable recursion.
E.On the internal DNS server, configure the external DNS server as forwarder.
F.On the internal DNS server, add the external DNS server as the only root hint.
Answer:A , E

Microsoft   70-293 questions   70-293 answers real questions   70-293

NO.20 You are a network administrator for your company. All domain controllers run Windows Server 2003.
The network contains 50 Windows 98 client computers, 300 Windows 2000 Professional computers, and
150 Windows XP Professional computers. According to the network design specification, the Kerberos
version 5 authentication protocol must be used for all client computers on the internal network. You need
to ensure that Kerberos version 5 authentication is used for all client computers on the internal network.
What should you do?
A. On each domain controller, disable Server Message Block (SMB) signing and encryption of the secure
channel traffic.
B. Replace all Windows 98 computers with new Windows XP Professional computers.
C. Install the Active Directory Client Extensions software on the Windows 98 computers.
D. Upgrade all Windows 98 computers to Windows NT Workstation 4.0.
Answer: B

Microsoft answers real questions   70-293   70-293 demo   70-293

ITCertMaster offer the latest 400-051 Practice Test and high-quality LOT-404 PDF Exam Questions training material. Our 70-484 VCE testing engine and HP2-W100 dumps can help you pass the real exam. High-quality 70-465 Exam Questions & Answers can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertmaster.com/70-293.html

Microsoft 70-646 exam practice questions and answers

The trouble can test a person's character. A bad situation can show special integrity. When to face of a difficult time, only the bravest people could take it easy. Are you a brave person? If you did not do the best preparation for your IT certification exam, can you take it easy? Yes, of course. Because you have ITCertMaster's Microsoft 70-646 exam training materials. As long as you have it, any examination do not will knock you down.

I believe that people want to have good prospects of career whatever industry they work in. Of course, there is no exception in the competitive IT industry. IT Professionals working in the IT area also want to have good opportunities for promotion of job and salary. A lot of IT professional know that Microsoft certification 70-646 exam can help you meet these aspirations. ITCertMaster is a website which help you successfully pass Microsoft 70-646.

Exam Code: 70-646
Exam Name: Microsoft (Windows Server 2008, Server Administrator)
Guaranteed success with practice guides, No help, Full refund!
266 Questions and Answers
Updated: 2013-12-29

Are you worrying about how to pass Microsoft 70-646 test? Now don't need to worry about the problem. ITCertMaster that committed to the study of Microsoft 70-646 certification exam for years has a wealth of experience and strong exam dumps to help you effectively pass your exam. Whether to pass the exam successfully, it consists not in how many materials you have seen, but in if you find the right method. ITCertMaster is the right method which can help you sail through Microsoft 70-646 certification exam.

The community has a lot of talent, people constantly improve their own knowledge to reach a higher level. But the country's demand for high-end IT staff is still expanding, internationally as well. So many people want to pass Microsoft 70-646 certification exam. But it is not easy to pass the exam. However, in fact, as long as you choose a good training materials to pass the exam is not impossible. We ITCertMaster Microsoft 70-646 exam training materials in full possession of the ability to help you through the certification. ITCertMaster website training materials are proved by many candidates, and has been far ahead in the international arena. . If you want to through Microsoft 70-646 certification exam, add the ITCertMaster Microsoft 70-646 exam training to Shopping Cart quickly!

In the such a brilliant era of IT industry in the 21st century competition is very fierce. Naturally, Microsoft certification 70-646 exam has become a very popular exam in the IT area. More and more people register for the exam and passing the certification exam is also those ambitious IT professionals' dream.

ITCertMaster to provide you with the real exam environment to help you find the real Microsoft 70-646 exam preparation process. If you are a beginner or want to improve your professional skills, ITCertMaster Microsoft 70-646 will help you, let you approached you desire step by step. If you have any questions on the exam question and answers, we will help you solve it. Within a year, we will offer free update.

From the view of specialized examination point, it is necessary to teach you tips about the exam. You need to outsmart, and do not give your future the chance of failure. ITCertMaster is a great resource site. It includes Microsoft 70-646 Exam Materials, study materials and technical materials, as well as exam training and detailed explanation and answers. The website which provide exam information are surged in recent years. This may cause you clueless when you prepare the Microsoft 70-646 exam. ITCertMaster's Microsoft 70-646 exam training materials are effective training materials that proven by professionals and the candidates who passed the exam. It can help you to pass the exam certification easily.

70-646 Free Demo Download: http://www.itcertmaster.com/70-646.html

NO.1 Your network consists of a single Active Directory domain. The network is located on the 172.16.0.0/23
subnet.
The company hires temporary employees. You provide user accounts and computers to the temporary
employees. The temporary employees receive computers that are outside the Active Directory domain.
The temporary employees use their computers to connect to the network by using wired connections and
wireless connections.
The company's security policy specifies that the computers connected to the network must have the latest
updates for the operating system.
You need to plan the network's security so that it complies with the company's security policy.
What should you include in your plan?
A. Implement a Network Access Protection (NAP) strategy for the 172.16.0.0/23 subnet.
B. Create an extranet domain within the same forest. Migrate the temporary employees' user accounts to
the extranet domain. Install the necessary domain resources on the 172.16.0.0/23 subnet.
C. Move the temporary employees' user accounts to a new organizational unit (OU). Create a new Group
Policy object (GPO) that uses an intranet Microsoft Update server. Link the new GPO to the new OU.
D. Create a new subnet in a perimeter network. Relocate the wireless access point to the perimeter
network. Require authentication through a VPN server before allowing access to the internal resources.
Answer: A

Microsoft   70-646 dumps   70-646   70-646 exam dumps   70-646

NO.2 Your network consists of a single Active Directory domain. The network contains two Windows Server
2008 R2 computers named Server1 and Server2. The company has two identical print devices. You plan
to deploy print services.
You need to plan a print services infrastructure to meet the following requirements:
- Manage the print queue from a central location.
- Make the print services available, even if one of the print devices fails.
What should you include in your plan?
A. Install and share a printer on Server1. Enable printer pooling.
B. Install the Remote Desktop Services server role on both servers. Configure Remote Desktop
Connection Broker (RD Connection Broker).
C. Install and share a printer on Server1. Install and share a printer on Server2. Use Print Management to
install the printers on the client computers.
D. Add Server1 and Server2 to a Network Load Balancing cluster. Install a printer on each node of the
cluster.
Answer: A

Microsoft   70-646 original questions   70-646 practice test

NO.3 Your company has a main office and a branch office. You plan to deploy a Readonly Domain Controller
(RODC) in the branch office.
You need to plan a strategy to manage the RODC. Your plan must meet the following requirements:
- Allow branch office support technicians to maintain drivers and disks on the RODC
- Prevent branch office support technicians from managing domain user accounts
What should you include in your plan?
A. Configure the RODC for Administrator Role Separation.
B. Configure the RODC to replicate the password for the branch office support technicians.
C. Set NTFS permissions on the Active Directory database to Read & Execute for the branch office
support technicians.
D. Set NTFS permissions on the Active Directory database to Deny Full Control for the branch office
support technicians.
Answer: A

Microsoft exam dumps   70-646 braindump   70-646

NO.4 Your network contains two servers that run the Server Core installation of Windows Server 2008 R2.
The two servers are part of a Network Load Balancing cluster.
The cluster hosts a Web site. Administrators use client computers that run Windows 7.
You need to recommend a strategy that allows the administrators to remotely manage the Network Load
Balancing cluster. Your strategy must support automation.
What should you recommend?
A. On the servers, enable Windows Remote Management (WinRM).
B. On the servers, add the administrators to the Remote Desktop Users group.
C. On the Windows 7 client computers, enable Windows Remote Management (WinRM).
D. On the Windows 7 client computers, add the administrators to the Remote Desktop Users group.
Answer: A

Microsoft original questions   70-646 questions   70-646   70-646

NO.5 Your company has 250 branch offices. Your network contains an Active Directory domain. The domain
controllers run Windows Server 2008 R2. You plan to deploy Readonly Domain Controllers (RODCs) in
the branch offices.
You need to plan the deployment of the RODCs to meet the following requirements:
- Build each RODC at the designated branch office.
- Ensure that the RODC installation source files do not contain cached secrets.
- Minimize the bandwidth used during the initial synchronization of Active Directory Domain Services
(AD?DS).
What should you include in your plan?
A. Use Windows Server Backup to perform a full backup of an existing domain controller. Use the backup
to build the new RODCs.
B. Use Windows Server Backup to perform a custom backup of the critical volumes of an existing domain
controller. Use the backup to build the new RODCs.
C. Create a DFS namespace that contains the Active Directory database from one of the existing domain
controllers. Build the RODCs by using an answer file.
D. Create an RODC installation media. Build the RODCs from the RODC installation media.
Answer: D

Microsoft demo   70-646   70-646   70-646 exam dumps   70-646 certification   70-646 original questions

NO.6 Your network consists of a single Active Directory domain. All domain controllers run Windows Server
2008 R2.
You need to implement a Certificate Services solution that meets the following requirements:
- Automates the distribution of certificates for internal users
- Ensures that the network's certificate infrastructure is as secure as possible
- Gives external users access to resources that use certificate based authentication
What should you do?
A. Deploy an online standalone root certification authority (CA). Deploy an offline standalone root CA.
B. Deploy an offline enterprise root certification authority (CA). Deploy an offline enterprise subordinate
CA.
C. Deploy an offline standalone root certification authority (CA). Deploy an online enterprise subordinate
CA. Deploy an online standalone subordinate CA.
D. Deploy an online standalone root certification authority (CA). Deploy an online enterprise subordinate
CA. Deploy an online standalone subordinate CA.
Answer: C

Microsoft   70-646 dumps   70-646 study guide   70-646   70-646 dumps

NO.7 Your network is configured as shown in the following diagram.
You deploy an enterprise certification authority (CA) on the internal network. You also deploy a Microsoft
Online Responder on the internal network. You need to recommend a secure method for Internet users to
verify the validity of individual certificates.
The solution must minimize network bandwidth.
What should you recommend?
A. Deploy a subordinate CA on the perimeter network.
B. Install a standalone CA and the Network Device Enrollment Service (NDES) on a server on the
perimeter network.
C. Install a Network Policy Server (NPS) on a server on the perimeter network. Redirect authentication
requests to a server on the internal network.
D. Install Microsoft Internet Information Services (IIS) on a server on the perimeter network.
Configure IIS to redirect requests to the Online Responder on the internal network.
Answer: D

Microsoft   70-646 dumps   70-646

NO.8 Your company purchases 15 new 64bit servers as follows:
- Five of the servers have a single processor.
- Five of the servers have a single dual core processor.
- Five of the servers have two quad core processors.
You plan to deploy Windows Server 2008 R2 on the new servers by using Windows Deployment Services
(WDS). You need to recommend a WDS install image strategy that meets the following requirements:
- Minimizes the number of install images
- Supports the deployment of Windows Server 2008 R2
What should you recommend?
A. one install image file that contains three install images
B. one install image file that contains a single install image
C. two install image files that each contain a single install image
D. three install image files that each contain a single install image
Answer: B

Microsoft   70-646 original questions   70-646 questions   70-646

NO.9 Your network contains a single Active Directory site.
You plan to deploy 1,000 new computers that will run Windows 7 Enterprise. The new computers have
Preboot Execution Environment (PXE) network adapters.
You need to plan the deployment of the new computers to meet the following requirements:
- Support 50 simultaneous installations of Windows 7
- Minimize the impact of network operations during the deployment of the new computers
- Minimize the amount of time required to install Windows 7 on the new computers
What should you include in your plan?
A. Deploy the Windows Deployment Services (WDS) server role. Configure the IP Helper tables on all
routers.
B. Deploy the Windows Deployment Services (WDS) server role. Configure each WDS server by using
native mode.
C. Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature.
Configure the Transport Server to use a custom network profile.
D. Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature.
Configure the Transport Server to use a static multicast address range.
Answer: D

Microsoft   70-646 answers real questions   70-646   70-646 test answers

NO.10 Your network contains a Webbased application that runs on Windows Server 2003. You plan to migrate
the Webbased application to Windows Server 2008 R2. You need to recommend a server configuration to
support the Webbased application.
The server configuration must meet the following requirements:
- Ensure that the application is available to all users if a single server fails
- Support the installation of .NET applications
- Minimize software costs
What should you recommend?
A. Install the Server Core installation of Windows Server 2008 R2 Standard on two servers.
Configure the servers in a Network Load Balancing cluster.
B. Install the full installation of Windows Server 2008 R2 Web on two servers. Configure the servers in a
Network Load Balancing cluster.
C. Install the full installation of Windows Server 2008 R2 Enterprise on two servers. Configure the servers
in a failover cluster.
D. Install the full installation of Windows Server 2008 R2 Datacenter on two servers. Configure the
servers in a failover cluster.
Answer: B

Microsoft original questions   70-646   70-646 certification training   70-646 exam simulations   70-646 exam prep

NO.11 Your network consists of a single Active Directory domain. The network contains five Windows Server
2008 R2 servers that host Web applications. You need to plan a remote management strategy to manage
the Web servers.
Your plan must meet the following requirements:
- Allow Web developers to configure features on the Web sites
- Prevent Web developers from having full administrative rights on the Web servers
What should you include in your plan?
A. Configure request filtering on each Web server.
B. Configure authorization rules for Web developers on each Web server.
C. Configure the security settings in Internet Explorer for all Web developers by using a Group Policy.
D. Add the Web developers to the Account Operators group in the domain.
Answer: B

Microsoft pdf   70-646   70-646 original questions   70-646   70-646 dumps   70-646 original questions

NO.12 Testlet: Blue Yonder Airlines
You need to recommend an administrative solution for the local support technicians in the satellite offices.
The solution must meet the company's security requirements.
What should you include in the recommendation?
BYA1 (exhibit):
BYA2 (exhibit):
BYA3 (exhibit):
A. Active Directory delegation
B. Administrator Role Separation
C. managed service accounts
D. Restricted Groups
Answer: B

Microsoft   70-646   70-646

NO.13 Your network consists of a single Active Directory domain. The network includes a branch office
named Branch1. Branch1 contains 50 member servers that run Windows Server 2008 R2. An
organizational unit (OU) named Branch1Servers contains the computer objects for the servers in Branch1.
A global group named Branch1admins contains the user accounts for the administrators. Administrators
maintain all member servers in Branch1. You need to recommend a solution that allows the members of
Branch1admins group to perform the following tasks on the Branch1 member servers.
- Stop and start services
- Change registry settings
What should you recommend?
A. Add the Branch1admins group to the Power Users local group on each server in Branch1.
B. Add the Branch1admins group to the Administrators local group on each server in Branch1.
C. Assign the Branch1admins group change permissions to the Branch1Servers OU and to all child
objects.
D. Assign the Branch1admins group Full Control permissions on the Branch1Servers OU and to all child
objects.
Answer: B

Microsoft exam simulations   70-646 exam prep   70-646 answers real questions   70-646

NO.14 Your network consists of a single Active Directory site that includes two network segments. The network
segments connect by using a router that is RFC 1542 compliant.
You plan to use Windows Deployment Services (WDS) to deploy Windows Server 2008 R2 servers. All
new servers support PreBoot Execution Environment (PXE).
You need to design a deployment strategy to meet the following requirements:
- Support Windows Server?2008 R2
- Deploy the servers by using WDS in both network segments
- Minimize the number of servers used to support WDS
What should you include in your design?
A. Deploy one server. Install WDS and DHCP on the server. Configure the IP Helper tables on the router
between the network segments.
B. Deploy two servers. Install WDS and DHCP on both servers. Place one server on each of the network
segments. Configure both servers to support DHCP option 60.
C. Deploy two servers. Install WDS and DHCP on both servers. Place one server on each of the network
segments. Configure both servers to support DHCP option 252.
D. Deploy two servers. Install WDS and DHCP on one server. Install DHCP on the other server.
Place one server on each of the network segments. Configure both servers to support DHCP option 60.
Answer: A

Microsoft   70-646   70-646 dumps

NO.15 Your network consists of a single Active Directory domain. Your main office has an Internet connection.
Your company plans to open a branch office. The branch office will connect to the main office by using a
WAN link. The WAN link will have limited bandwidth. The branch office will not have access to the Internet.
The branch office will contain 30 Windows Server 2008 R2 servers.
You need to plan the deployment of the servers in the branch office.
The deployment must meet the following requirements:
- Installations must be automated.
- Computers must be automatically activated.
- Network traffic between the offices must be minimized.
What should you include in your plan.?
A. In the branch office, implement Key Management Service (KMS), a DHCP server, and Windows
Deployment Services (WDS).
B. Use Multiple Activation Key (MAK) Independent Activation on the servers. In the main office, implement
a DHCP server and Windows Deployment Services (WDS).
C. In the main office, implement Windows Deployment Services (WDS). In the branch office, implement a
DHCP server and implement the Key Management Service (KMS).
D. Use Multiple Activation Key (MAK) Independent Activation on the servers. In the main office,
implement a DHCP server. In the branch office, implement Windows Deployment Services (WDS).
Answer: A

Microsoft   70-646 original questions   70-646   70-646

NO.16 You need to recommend a Windows Server 2008 R2 server configuration that meets the following
requirements:
- Supports the installation of Microsoft SQL Server 2008
- Provides redundancy for SQL services if a single server fails
What should you recommend?
A. Install a Server Core installation of Windows Server 2008 R2 Enterprise on two servers. Configure the
servers in a failover cluster.
B. Install a full installation of Windows Server 2008 R2 Standard on two servers. Configure Network Load
Balancing on the two servers.
C. Install a full installation of Windows Server 2008 R2 Enterprise on two servers. Configure Network
Load Balancing on the two servers.
D. Install a full installation of Windows Server 2008 R2 Enterprise on two servers. Configure the servers in
a failover cluster.
Answer: D

Microsoft   70-646   70-646 demo   70-646   70-646   70-646

NO.17 Your network consists of a single Active Directory domain. The functional level of the domain is
Windows Server 2008 R2. The domain contains 200 Windows Server 2008 R2 servers.
You need to plan a monitoring solution that meets the following requirements:
- Sends a notification by email to the administrator if an application error occurs on any of the servers
- Uses the minimum amount of administrative effort
What should you include in your plan?
A. On one server, create event subscriptions for each server. On the server, attach tasks to the application
error events.
B. On one server, create an Event Trace Sessions Data Collector Set. On all servers, create a System
Performance Data Collector Set.
C. On all servers, create event subscriptions for one server. On all servers, attach a task for the
application error events.
D. On all servers, create a System Performance Data Collector Set. On one server, configure the report
settings for the new Data Collector set.
Answer: A

Microsoft original questions   70-646 dumps   70-646

NO.18 Your network contains two DHCP servers. The DHCP servers are named DHCP1 and DHCP2. The
internal network contains 1,000 DHCP client computers that are located on a single subnet. A router
separates the internal network from the Internet. The router has a single IP address on the internal
interface.
DHCP1 has the following scope information:
- Starting IP address: 172.16.0.1
- Ending IP address: 172.16.7.255
- Subnet mask: 255.255.240.0
You need to provide a faulttolerant DHCP infrastructure that supports the client computers on the internal
network. In the event that a DHCP server fails, all client computers must be able to obtain a valid IP
address.
How should you configure DHCP2?
A. Create a scope for the subnet 172.16.0.0/20. Configure the scope to use a starting IP address of
172.16.8.1 and an ending IP address of 172.16.15.254.
B. Create a scope for the subnet 172.16.0.0/21. Configure the scope to use a starting IP address of
172.16.0.1 and an ending IP address of 172.16.15.254.
C. Create a scope for the subnet 172.16.8.0/21. Configure the scope to use a starting IP address of
172.16.8.1 and an ending IP address of 172.16.10.254.
D. Create a scope for the subnet 172.17.0.0/16. Configure the scope to use a starting IP address of
172.17.0.1 and an ending IP address of 172.17.255.254.
Answer: A

Microsoft dumps   70-646   70-646

NO.19 Your company has a main office and two branch offices. The main office is located in London. The
branch offices are located in New York and Paris.
Your network consists of an Active Directory forest that contains three domains named contoso.com,
paris.contoso.com, and newyork.contoso.com. All domain controllers run Windows Server 2008 R2 and
have the DNS Server server role installed.
The domain controllers for contoso.com are located in the London office. The domain controllers for
paris.contoso.com are located in the Paris office. The domain controllers for newyork.contoso.com are
located in the New York office.
A domain controller in the contoso.com domain has a standard primary DNS zone for contoso.com. A
domain controller in the paris.contoso.com domain has a standard primary DNS zone for
paris.contoso.com. A domain controller in the newyork.contoso.com domain has a standard primary DNS
zone for newyork.contoso.com.
You need to plan a name resolution strategy for the Paris office that meets the following requirements:
- If a WAN link fails, clients must be able to resolve hostnames for contoso.com.
- If a WAN link fails, clients must be able to resolve hostnames for newyork.contoso.com.
- The DNS servers in Paris must be updated when new authoritative DNS servers are added to
newyork.contoso.com.
What should you include in your plan?
A. Configure conditional forwarding for contoso.com. Configure conditional forwarding for
newyork.contoso.com.
B. Create a standard secondary zone for contoso.com. Create a standard secondary zone for
newyork.contoso.com.
C. Convert the standard zone into an Active Directoryintegrated zone. Add all DNS servers in the forest to
the root hints list.
D. Create an Active Directoryintegrated stub zone for contoso.com. Create an Active Directoryintegrated
stub zone for newyork.contoso.com.
Answer: B

Microsoft answers real questions   70-646 dumps   70-646   70-646

NO.20 Your network contains an Active Directory forest named contoso.com.
You plan to deploy a new child domain named branch.contoso.com. The child domain will contain two
domain controllers. Both domain controllers will have the DNS Server server role installed. All users and
computers in the branch office will be members of the branch.contoso.com domain.
You need to plan the DNS infrastructure for the child domain to meet the following requirements:
- Ensure resources in the root domain are accessible by fully qualified domain names.
- Ensure resources in the child domain are accessible by fully qualified domain names.
- Provide name resolution services in the event that a single server fails for a prolonged period of time.
- Automatically recognize when new DNS servers are added to or removed from the contoso.com
domain.
What should you include in your plan?
A. On both domain controllers, add a conditional forwarder for contoso.com and create a standard
primary zone for branch.contoso.com.
B. On both domain controllers, modify the root hints to include the domain controllers for contoso.com. On
one domain controller, create an Active Directoryintegrated zone for branch.contoso.com.
C. On one domain controller create an Active Directoryintegrated zone for branch.contoso.com and
create an Active Directoryintegrated stub zone for contoso.com.
D. On one domain controller, create a standard primary zone for contoso.com. On the other domain
controller, create a standard secondary zone for contoso.com.
Answer: C

Microsoft   70-646 exam simulations   70-646 test answers

ITCertMaster offer the latest CTAL-TM_Syll2012 Practice Test and high-quality 70-465 PDF Exam Questions training material. Our CAT-340 VCE testing engine and LOT-440 dumps can help you pass the real exam. High-quality 000-283 Exam Questions & Answers can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.itcertmaster.com/70-646.html