Microsoft Windows Server 2008,Enterprise Administrator Sample Questions:

1. Your network consists of one Active Directory domain that contains domain controllers that run Windows Server 2008.
You deploy Windows Server 2008 Enterprise Edition on 20 new computers. You deploy a Server Core installation of Windows Server 2008 Standard Edition on 20 old computers.
You create a new organization unit (OU) named Servers OU. You move all server computer accounts to Servers OU.
You need to recommend a patch management solution for the new computers. The solution must ensure that all computers automatically download and install updates approved by administrators.
What should you recommend?

A) Implement a new Windows Server Update Services (WSUS) 3.0 server. Manually enable the servers for Automatic Updates.
B) Create a new Group Policy object (GPO) for Servers OU. Configure the GPO to enable Automatic Updates from Microsoft Update.
C) Implement a new Windows Server Update Services (WSUS) 3.0 server. Create a new Group Policy object (GPO) for Servers OU. Configure the GPO to enable Automatic Updates from a local server.
D) Create a new Group Policy object (GPO) for the Active Directory domain. Configure the GPO to enable Automatic Updates from Microsoft Update.

2. A company has a main office and multiple branch offices. The corporate network contains an Active Directory Domain Services (AD DS) domain and servers that run Windows Server 2008 R2.
You plan to deploy 50 read-only domain controllers (RODCs) to the branch offices. You will configure the RODCs at the company's main office and then ship them to the branch offices for installation by on-site technicians.
You have the following requirements:
-Minimize network traffic related to the installation.
-Ensure the security of the RODCs.
You need to create a server configuration plan that meets the requirements.
You use the Ntdsutil command-line utility to prepare an Install From Media (IFM) source, removing any sensitive credentials.
What should you recommend next? (More than one answer choice may achieve the goal. Select the BEST answer.)

A) Perform a Server Core installation of Windows Server 2008 R2 and add the RODC server role. Run DCPROMO with the /UseExistingAccount: Attach switch.
B) Install Windows Server 2008 R2 and add the RODC server role. Run DCPROMO and specify an answer file that includes the IFM location.
C) Install Windows Server 2008 R2 and add the RODC server role. Run DCPROMO with the / ReplicationSourcePath switch and specify the IFM source.
D) Perform a Server Core installation of Windows Server 2008 R2 and add the RODC server role. Run DCPROMO and specify an answer file that includes the IFM location.

3. DRAG DROP
A company has an Active Directory Domain Services (AD DS) forest. The company has a wholly owned subsidiary with which it shares some IT resources. Each company has its own Active Directory domain within the forest. Each company has two Active Directory sites in its domain: one site for the company's main office and one site for the company's branch office.
You are designing a software update strategy for both companies. The strategy must meet the following requirements:
-Reduce network traffic.
-Allow the deployment of unique updates within each domain.
-Prevent subsidiary branch office employees from approving or denying updates.
-Allow administrators in the main company to approve or deny their own updates.
You need to specify the placement and configuration of Windows Server Update Services (WSUS) servers.
What should you do?
To answer, drag the appropriate server configuration or configurations to the correct location or locations in the answer area. (Use only server configurations that apply.)
Select and Place:

4. Your company has one main office and four branch offices. Each branch office has a read-only domain
controller (RODC).
The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 R2.
Some branch office users work in a department named Sales. Sales department users must be able to log
on to all computers in their respective branch offices, even if a wide area network (WAN) link fails.
The company security policy has the following requirements:
* User account passwords must be replicated to the minimum number of locations. * A minimum number of passwords must be replicated to the branch office domain controllers
You need to configure a password replication policy that supports the company security policy.
What should you do?

A) Create one global group for each branch office that contain the Sales department users and computers in the corresponding branch office. Add all groups to Windows Authorization Access Group in the domain.
B) Install a writable domain controller in all branch offices, Create one global group that contains the computers of all Sales department users. Add the group to the Allowed RODC Password Replication Group in the domain.
C) Install a writable domain controller in all branch offices. Create one global group that contains all Sales department users. Create a fine-grained password policy and apply the policy to the group.
D) Create one global group for each branch office that contains the Sales department users and computers
in the corresponding branch office. Add each group to the Password Replication Policy in the
corresponding branch office.

5. You need to recommend a solution for the planned VDI that meets the company's technical requirements.
What should you include in the recommendation?

A) Profile redirection by using Group Policy Objects (GPOs).
B) Personal virtual desktops.
C) Folder redirection by using Group Policy Objects (GPOs).
D) Virtual desktop pools.

Solutions: