MCSE Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Exam Cram 2 (Exam Cram 70-297)

Question 1

How many domains should Layton Manufacturing have in its new Active Directory infrastructure?

  • A. There isn't enough information to know

  • B. 1

  • C. 4

  • D. 5

Question 2

How should Layton set up its OU structure?

  • A. There isn't enough information to know

  • B. Functionally

  • C. Organizationally

  • D. Geographically

Question 3

How many domain controllers should Layton have, at a minimum, in its new Active Directory?

  • A. 4

  • B. 8

  • C. 10

  • D. 5

Question 4

How many sites should Layton's new Active Directory contain?

  • A. 4

  • B. There isn't enough information to know

  • C. 2

  • D. 5

Question 5

On which clients will Layton be able to use IPSec security policies? (Choose all that apply.)

  • A. Windows NT Workstation

  • B. Windows XP Professional

  • C. Windows 95

  • D. Windows 2000 Professional

Question 6

For which clients can Windows Server 2003 DHCP servers be configured to assign IP addresses and register A (host) records in DNS? (Choose all that apply.)

  • A. Windows NT Workstation

  • B. Windows 95

  • C. Windows XP Professional

  • D. None of the clients

Question 7

Which type(s) of zones should be used in Layton's new DNS infrastructure?

  • A. Standard primary and standard secondary

  • B. Stub

  • C. Active Directory integrated

  • D. Caching-only

Question 8

Which replication protocol should Layton use between sites?

  • A. RPC over IP

  • B. SMTP

  • C. TCP

  • D. UDP

Question 9

You decide to add a full T-1 connection to Cleveland. You leave the ISDN BRI connection in place to be used as a backup. You configure the site link for the T-1 with a cost of 50. Which is an appropriate cost for the ISDN link to make sure it will be used only as a backup? (Choose all that apply.)

  • A. The cost doesn't matter; the system will sense the bandwidth available.

  • B. 51

  • C. 25

  • D. 10000

Question 10

How many flexible single master operations roles will the entire Layton enterprise have?

  • A. 25

  • B. 10

  • C. 1

  • D. 5

Question 11

You want to monitor Active Directory replication using a command-line tool. Which tool should you use?

  • A. Active Directory Users and Computers

  • B. Active Directory Sites and Services

  • C. repadmin.exe

  • D. ntdsutils

Question 12

What is the minimum number of global catalog servers required?

  • A. 5

  • B. 4

  • C. 1

  • D. 10

Question 13

Which type of replication should Layton use for WINS servers?

  • A. Push

  • B. Pull

  • C. Push/Pull

  • D. RPC

Question 14

How many trusts should be implemented in Layton's new Active Directory?

  • A. 5

  • B. 4

  • C. 1

  • D. 0

Question 15

Layton is considering purchasing a company in France. The new division of Layton Manufacturing will have IT management in France and a separate Internet presence as LaytonFrance.com. How should the new location in France be configured into Layton's Active Directory? (Choose all that apply.)

  • A. As a new domain

  • B. As a new forest

  • C. As a new tree

  • D. As a new OU

Case 4: Three Rivers Software Development Company

Overview

Three Rivers Software Development Company is a large organization with many offices in the U.S. as well as Canada, Japan, Australia, and Germany. Three Rivers produces software used specifically by pharmaceutical companies. Its products are cutting edge, so it has extensive security policies and procedures. Three Rivers is soon going to expand with new offices in London and France. Long-range plans include many more offices.

Current WAN/Network

Three Rivers currently has offices in the following locations:

  • Pittsburgh (Headquarters)

  • Birmingham

  • San Diego

  • Milwaukee

  • Chicago

  • Maui

  • Tokyo

  • Ontario

  • Berlin

  • Sydney

All LAN communications use at least a 10Mbps link. Some offices have 100Mbps connectivity throughout. Servers include Windows NT 4.0 domain controllers and Windows 2000 member servers. Clients include Windows 95, Windows 98, Windows 2000 Professional, Windows NT Workstation, and Windows XP Professional.

Current Domain and Management Infrastructure

Three Rivers currently has six domains. All offices in the U.S. are consolidated to one domain with one IT management team. Offices in each of the other countries have their own domain and their own IT management teams. Each office also has its own Internet presence. Each of the domains outside the U.S. trusts the U.S. domain, which contains the headquarters office. Headquarters does not currently trust any of the other domains nor do any of the other domains trust each other. The Sydney office is actually a partially owned subsidiary and must have complete autonomy from the headquarters office for legal reasons.

Current WAN/Network

Three Rivers headquarters office has full T-1 bandwidth to each of the other offices in the Unite States. In addition, it has full E-1 bandwidth to the office in Berlin. Each of the other offices outside the U.S. has ISDN BRI connectivity to the Pittsburgh (headquarters) office, with the exception of Sydney, which has only a 56K demand-dial connection. This link can be very unreliable at times.

Proposed WAN/Network

Three Rivers is considering upgrading its network to Windows Server 2003. The main goals are the following:

  • Reduce the number of domains, if possible.

  • Establish and maintain trust relationships between all domains.

  • Eliminate WINS servers from the network, if possible.

  • All DNS zone transfers should be secured and encrypted.

  • Group policies should be enforced on all computers in the San Diego office and all possible computers in the other offices.

  • All Active Directory replication within the United States should be scheduled.

  • All clients should obtain addresses from DHCP servers.

  • All client A (host) records should be dynamically registered.

Directory Design Commentary

CIO: We need to have the most secure remote access possible, regardless of the cost. Also, our headquarters office will use a minimum password length of eight characters, regardless of what the other U.S. offices use.

CFO: We cannot afford to upgrade all client computers at this time.

Security Officer: The San Diego office is a very high security installation. We must have a minimum password length of 12 characters instead of the 8-character minimum that headquarters uses. The clients must use IPSec for all communications.

Related

Категории