Microsoft Windows Server 2008,Enterprise Administrator Sample Questions:

1. You run a Microsoft Baseline Security Analyzer scan and find that several important security updates have not been applied to Jakarta client computers.
You need to apply the updates and comply with all requirements.
What should you do?

A) Set JK02 to synchronize with Windows Update and automatically approve all security updates. Approve the updates on JK02.
B) Set JK02 to synchronize with LA02. Approve all required updates on JK02.
C) Set LA02 to synchronize with Windows Update and automatically approve all security updates. Approve the updates on JK02.
D) Set JK02 to synchronize with LA02. Approve all required updates on LA02.

2. You need to recommend a solution for the Publuic Key Infrastructure (PKI) that meets the following requirements: . Ensure that administrator in India can approve certificates for users in the India domain. . Minimize costs. What should you recommend?

A) Configure CA permissions and Certificate Manager Restrictions.
B) Deploy a standalone subordinate CA to the domain in India.
C) Deploy an enterprise subordinate CA to the domain in India.
D) Configure CA permissions and the Exit
Module of the CA.

3. Your Network consists of one Active Directory forest that has three domains. All domains run Windows
Server 2008 R2.
Each domain has two domain controllers, four aplication servers, and 10 file servers.
Each domain, you create an organizational unit (OU) named OU1.
You need to plan the deployement of security policy on all application servers to meet te following requirements:
-All application servers must have identical security settings.
-All security settings must be applied only to the application servers.
What should you do next?

A) Move all domain servers in the domain to OU1. Create three Group Policy objects (GPSs) that contain the security policy settings. Link GPO to each domain.
B) Move all domain servers to OU1. Create one Group Policy object (GPO) that contains the security policy settings. Link the GPO to each named OU1.
C) Move all application servers to OU1. Create one Group Policy object (GPO) that contains the security policy settings. Link the GPO to domain.
D) Move all application servers to OU1. Create three Group Policy objects (GPSs) that contain the security policy settings. Link one GPO to each OU named OU1.

4. Your network consists of one Active Directory domain. All servers run Windows Server 2008 R2.
You plan to publish a Web site on two Web servers.
You need to recommend a solution for the deployment of the two Web servers. The solution must provide the following requirements:
-Session-state information for all users
-Access to the Web site if a single server fails
-Scalability to as many as seven Web servers
-Support for multiple dedicated IP addresses for each Web server
What should you recommend?

A) Install Network Load Balancing on each Web server.
B) Install failover clustering on each Web server.
C) Create managed handler mappings in Internet Information Services (IIS) 7.0.
D) Assign multiple bindings in Internet Information Services (IIS) 7.0.

5. You need to recommend a NAP enforcement method for wingtiptoys.com that meets the company's security requirements.
Which NAP enforcement method should you recommend?

A) vpn
B) DHCP
C) IPsec
D) 802.1x

Solutions: