Windows Server 2008, Server Administrator

1. Your network contains three servers that run Windows 2000 Server. Each server has a custom application installed. The applications:
Are incompatible with each other
Are incompatible with Windows Server 2008
Consume less than 10 percent of the system resources
A company policy states that all new physical servers must run Windows Server 2008.
You need to plan the migration of the applications to new Windows Server 2008 servers. You want to achieve this goal while minimizing hardware costs.
What actions should you include in your plan?
A. Deploy three new servers that run Windows Server 2008 Standard Edition. Configure Windows 2000 compatibility mode for each application.
B. Deploy one new server that runs Windows Server 2008 Datacenter Edition. Install the Desktop Experience feature.
C. Deploy one new server that runs Windows Server 2008 Enterprise Edition. Install the Windows System Resource Manager (WSRM) feature on the new server.
D. Deploy one new server that runs Windows Server 2008 Enterprise Edition. Install the Hyper-V feature on the new server. Create three child virtual machines.
Answer: D

2. You need to recommend a Windows Server 2008 server configuration that meets the following requirements:
Supports the installation of Microsoft SQL Server 2005
Provides redundancy for SQL services if a single server fails
What should you recommend?
A. Install a Server Core installation of Windows Server 2008 Enterprise Edition on two servers. Configure failover clusters on the two servers.
B. Install a full installation of Windows Server 2008 Standard Edition on two servers. Configure Network Load Balancing on the two servers.
C. Install a full installation of Windows Server 2008 Enterprise Edition on two servers. Configure Network Load Balancing on the two servers.
D. Install a full installation of Windows Server 2008 Enterprise Edition on two servers. Configure failover clusters on the two servers.
Answer: D

3. Your network consists of a single Active Directory domain. Your main office has an Internet connection.
Your company plans to open a branch office. The branch office will connect to the main office by using a WAN link. The WAN link will have limited bandwidth. The branch office will not have access to the Internet. The branch office will contain 30 Windows Server 2008 servers.
You need to plan the deployment of the servers in the branch office. The deployment must meet the following requirements:
Installations must be automated.
Computers must be automatically activated.
Network traffic between the offices must be minimized.
What should you include in your plan?
A. In the branch office, implement Key Management Service (KMS), a DHCP server, and Windows Deployment Services (WDS).
B. Use Multiple Activation Key (MAK) Independent Activation on the servers. In the main office, implement a DHCP server and Windows Deployment Services (WDS).
C. In the main office, implement Windows Deployment Services (WDS). In the branch office, implement a DHCP server and implement the Key Management Service (KMS).
D. Use Multiple Activation Key (MAK) Independent Activation on the servers. In the main office, implement a DHCP server. In the branch office, implement Windows Deployment Services (WDS).
Answer: A

4. Your network contains a Web-based application that runs on Windows Server 2003.
You plan to migrate the Web-based application to Windows Server 2008.
You need to recommend a server configuration to support the Web-based application. The server configuration must meet the following requirements:
Ensure that the application is available to all users if a single server?fails
Support the installation of .NET applications
Minimize software costs
What should you recommend?
A. Install the Server Core installation of Windows Server 2008 Standard Edition on two servers. Configure the servers in a Network Load Balancing cluster.
B. Install the full installation of Windows Server 2008 Web Edition on two servers. Configure the servers in a Network Load Balancing cluster.
C. Install the full installation of Windows Server 2008 Enterprise Edition on two servers. Configure the servers in a failover cluster.
D. Install the full installation of Windows Server 2008 Datacenter Edition on two servers. Configure the servers in a failover cluster.
Answer: B

5. Your network has two servers that run Windows Server 2003. One server hosts an application named App1. The other server hosts an application named App2.
App1 requires the 32-bit installation of Windows Server 2003. App2 requires the 64-bit installation of Windows Server 2003.
You need to recommend a solution for replacing the servers that host App1 and App2. Your solution must be based on Windows Server 2008 and must minimize costs.
What should you recommend?
A. Install a new server that runs a 64-bit version of Windows Server 2008 Enterprise Edition. Install the Hyper-V feature on the new server. Install App1 and App2 in separate child virtual machines.
B. Install a new server that runs a 64-bit version of Windows Server 2008 Datacenter Edition. Install Windows System Resource Manager (WSRM) on the new server. Install App1 and App2 on the new server.
C. Install two new servers that run 64-bit versions of Windows Server 2008 Enterprise Edition. On both servers, install the Hyper-V feature. Install App1 as a child virtual machine on one server. Install App2 as a child virtual machine on the other server.
D. Install two new servers. Install the 32-bit version of Windows Server 2008 Enterprise Edition on one server. Install the 64-bit version of Windows Server 2008 Enterprise Edition on the other server. Install Windows System Resource Manager (WSRM) on both servers. Install App1 on the 32-bit server. Install App2 on the 64-bit server.
Answer: A

6. Your network contains a single Active Directory site. You have a server named Server1 that runs Windows Server 2008. Server1 is a DHCP server for the network.
You need to plan the automated deployment of operating systems. Your plan must meet the following requirements:
Support Windows Vista deployments
Support Windows Server 2008 deployments
Support computers that start from a Pre-boot Execution Environment (PXE) network adapter
Minimize the number of servers installed
What should you include in your plan?
A. Deploy Windows Automated Installation Kit (WAIK) on Server1.
B. Deploy Windows Automated Installation Kit (WAIK) on a new server.
C. Deploy the Windows Deployment Services (WDS) server role on Server1.
D. Deploy the Windows Deployment Services (WDS) server role on a new server.
Answer: C

7. Your network contains a single Active Directory site.
You plan to deploy 1,000 new computers that will run Windows Vista Enterprise Edition. The new computers have Pre-boot Execution Environment (PXE) network adapters.
You need to plan the deployment of the new computers to meet the following requirements:
Support 50 simultaneous installations of Windows Vista
Minimize the impact of network operations during the deployment of the new computers
Minimize the amount of time required to install Windows Vista on the new computers
What should you include in your plan?
A. Deploy the Windows Deployment Services (WDS) server role. Configure the IP Helper tables on all routers.
B. Deploy the Windows Deployment Services (WDS) server role. Configure each WDS server by using legacy mode.
C. Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature. Configure the Transport Server to use a custom network profile.
D. Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature. Configure the Transport Server to use a static multicast address range.
Answer: D

8. Your network has a DHCP server that runs the 64-bit version of Windows Server 2008. The network only uses IPv4.
You plan to deploy 50 new Windows Server 2008 servers. Some of the new servers contain 64-bit hardware and some of the servers contain 32-bit hardware. All of the new server hardware supports Pre-Boot Execution Environment (PXE).
You need to plan for the automated deployment of the new servers. You want to achieve this goal while minimizing hardware costs.
What should you include in your plan?
A. Deploy Windows Deployment Services (WDS) on the DHCP server.
B. Deploy Remote Installation Services (RIS) on a 64-bit server that runs Windows Server 2003.
C. Deploy Windows Deployment Services (WDS) on two servers that run Windows Server 2008. One of the servers is a 64-bit server, and the other server is a 32-bit server.
D. Deploy Remote Installation Services (RIS) on two servers that run Windows Server 2003 Service Pack 2. One of the servers is a 64-bit server, and the other server is a 32-bit server.
Answer: A

9. Your company has 250 branch offices.
Your network contains an Active Directory domain. The domain controllers run Windows Server 2008.
You plan to deploy Read-only Domain Controllers (RODCs) in the branch offices.
You need to plan the deployment of the RODCs to meet the following requirements:
Build each RODC at the designated branch office.
Ensure that the RODC installation source files do not contain cached secrets.
Minimize the bandwidth used during the initial synchronization of Active Directory Domain Services (AD?DS).
What should you include in your plan?
A. Use Windows Server Backup to perform a full backup of an existing domain controller. Use the backup to build the new RODCs.
B. Use Windows Server Backup to perform a custom backup of the critical volumes of an existing domain controller. Use the backup to build the new RODCs.
C. Create a DFS Namespace that contains the Active Directory database from one of the existing domain controllers. Build the RODCs by using an answer file.
D. Create an RODC installation media. Build the RODCs from the RODC installation media.
Answer: D

10. Your network consists of a single Active Directory forest that contains multiple domains. The domain controllers run Windows Server 2008 and have the DNS role installed.
For name resolution, you plan to replace a legacy Windows Internet Name Service (WINS) environment with a DNS-only environment.
You need to plan the infrastructure for name resolution to meet the following requirements:
Support IPv4 and IPv6 environments
Allow single-label name resolution across all domains
Minimize the amount of NetBIOS over TCP/IP (NetBT) traffic on the network
What should you include in your plan?
A. Configure a GlobalNames zone on each domain controller.
B. Modify each DNS zone to perform a WINS forward lookup.
C. Configure each DNS zone to replicate to each DNS server in the forest.
D. Modify each DNS zone to replicate as part of a custom Active Directory replication partition.
Answer: A

11. Your network contains an Active Directory forest named contoso.com.
You plan to deploy a new child domain named branch.contoso.com. The child domain will contain two domain controllers. Both domain controllers will have the DNS server role installed. All users and computers in the branch office will be members of the branch.contoso.com domain.
You need to plan the DNS infrastructure for the child domain to meet the following requirements:
Ensure resources in the root domain are accessible by fully qualified domain names.
Ensure resources in the child domain are accessible by fully qualified domain names.
Provide name resolution services in the event that a single server fails for a prolonged period of time.
Automatically recognize when new DNS servers are added to or removed from the contoso.com domain.
What should you include in your plan?
A. On both domain controllers, add a conditional forwarder for contoso.com and create a standard primary zone for branch.contoso.com.
B. On both domain controllers, modify the root hints to include the domain controllers for contoso.com. On one domain controller, create an Active Directory integrated zone for branch.contoso.com.
C. On one domain controller create an Active Directory Integrated zone for branch.contoso.com and create an Active Directory Integrated stub zone for contoso.com.
D. On one domain controller, create a standard primary zone for contoso.com. On the other domain controller, create a standard secondary zone for contoso.com.
Answer: C

12. Your network is configured as shown in the following diagram.

You deploy an enterprise certification authority (CA) on the internal network. You also deploy a Microsoft Online Responder on the internal network.
You need to recommend a secure method for Internet users to verify the validity of individual certificates. The solution must minimize network bandwidth.
What should you recommend?
A. Deploy a subordinate CA on the perimeter network.
B. Install a stand-alone CA and the Network Device Enrollment Service (NDES) on a server on the perimeter network.
C. Install a Network Policy Server (NPS) on a server on the perimeter network. Redirect authentication requests to a server on the internal network.
D. Install Microsoft Internet Information Services (IIS) on a server on the perimeter network. Configure IIS to redirect requests to the Online Responder on the internal network.
Answer: D

13. Your network contains servers that run either Windows Server 2003 or Windows Server 2008. All client computers run Windows Vista.
Your company has a public key infrastructure (PKI) that includes an offline root certification authority (CA) and two enterprise subordinate Cas. All Cas run Windows Server 2003.
You publish the certificates to the user accounts and the computer accounts in Active Directory.
Your company creates an engineering department.
You need to plan a PKI solution for the Windows Vista client computers and the Windows Server 2008 servers that are in the engineering department. Your solution must meet the following requirements:
The certificates must support Suite B hashing and encryption algorithms.
The private keys must be stored in Active Directory.
The administrative effort to manage certificates for your network must be minimized.
What should you include in your plan?
A. Install a new Windows Server 2008 enterprise subordinate CA.
B. Install a new Windows Server 2008 stand-alone subordinate CA.
C. Deploy a new PKI that uses Windows Server 2008 Cas. Configure cross-certification between the CA hierarchies.
D. Create a new Active Directory forest. Deploy a new PKI that uses Windows Server 2008 Cas. Configure one-way forest trusts between the two forests.
Answer: A

14. Your company has 100 physical servers that contain 64-bit hardware and that run Windows Server 2003.
You need to consolidate the 100 physical servers into 30 physical servers that run Windows Server 2008. You must achieve this goal while meeting the following requirements:
Maximize resource utilization
Use existing hardware and software
Support 64-bit child virtual machines
Maintain separate services among the servers
What should you do?
A. Consolidate services across the physical machines and create the necessary host (A) records.
B. Install Microsoft Virtual PC and convert the physical machines into virtual machines.
C. Install Microsoft Virtual Server 2005 R2 and convert the physical machines into virtual machines.
D. Install the Hyper-V feature and convert the physical machines into virtual machines.
Answer: D

15. Your network contains two DHCP servers. The DHCP servers are named DHCP1 and DHCP2. The internal network contains 1,000 DHCP client computers that are located on a single subnet. A router separates the internal network from the Internet. The router has a single IP address on the internal interface.
DHCP1 has the following scope information.
Starting IP address: 172.16.0.1
Ending IP address: 172.16.7.255
Subnet mask: 255.255.240.0
You need to provide a fault-tolerant DHCP infrastructure that supports the client computers on the internal network. In the event that a DHCP server fails, all client computers must be able to obtain a valid IP address.
How should you configure DHCP2?
A. Create a scope for the subnet 172.16.0.0/20. Configure the scope to use a starting IP address of 172.16.8.1 and an ending IP address of 172.16.15.254.
B. Create a scope for the subnet 172.16.0.0/21. Configure the scope to use a starting IP address of 172.16.0.1 and an ending IP address of 172.16.15.254.
C. Create a scope for the subnet 172.16.8.0/21. Configure the scope to use a starting IP address of 172.16.8.1 and an ending IP address of 172.16.10.254.
D. Create a scope for the subnet 172.17.0.0/16. Configure the scope to use a starting IP address of 172.17.0.1 and an ending IP address of 172.17.255.254.
Answer: A

16. Your company has a main office and three branch offices. The network consists of a single Active Directory domain. Each office contains an Active Directory domain controller.
You need to create a DNS infrastructure for the network that meets the following requirements:
The DNS infrastructure must allow the client computers in each office to register DNS names within their respective offices.
The client computers must be able to resolve names for hosts in all offices.
What should you do?
A. Create an Active Directory-integrated zone at the main office site.
B. Create a standard primary zone at the main office site and at each branch office site.
C. Create a standard primary zone at the main office site. Create a secondary zone at each branch office site.
D. Create a standard primary zone at the main office site. Create an Active Directory-integrated stub zone at each branch office site.
Answer: A

17. Your network consists of a single Active Directory domain. The network contains two Windows Server 2008 computers named Server1 and Server2. The company has two identical print devices.
You plan to deploy print services.
You need to plan a print services infrastructure to meet the following requirements:
Manage the print queue from a central location.
Make the print services available, even if one of the print devices fails.
What should you include in your plan?
A. Install and share a printer on Server1. Enable printer pooling.
B. Install the Terminal Services server role on both servers. Configure Terminal Services Session Broker (TS Session Broker).
C. Install and share a printer on Server1. Install and share a printer on Server2. Use Print Manager to install the printers on the client computers.
D. Add Server1 and Server2 to a Network Load Balancing cluster. Install a printer on each node of the cluster.
Answer: A

18. Your network contains two servers that run the Server Core installation of Windows Server 2008. The two servers are part of a Network Load Balancing cluster. The cluster hosts a Web site. Administrators use client computers that run Windows Vista.
You need to recommend a strategy that allows the administrators to remotely manage the Network Load Balancing cluster. Your strategy must support automation.
What should you recommend?
A. On the servers, enable Windows Remote Management (WinRM).
B. On the servers, add the administrators to the remote Desktop Users group.
C. On the Windows Vista client computers, enable Windows Remote Management (WinRM).
D. On the Windows Vista client computers, add the administrators to the remote Desktop Users group.
Answer: A

19. Your network contains a DNS server that runs a Server Core installation of Windows Server 2008. The domain administrators use client computers that run Windows Vista.
You need to recommend a strategy that allows the administrators to manage DNS from their Windows Vista client computers.
What should you recommend?
A. On the DNS server, set the Remote Access Connection Manager service to automatic.
B. On the Windows Vista client computers, install Remote Server Administration Tools (RSAT).
C. On the Windows Vista client computers, run Setup.exe /u from the Windows Server 2008 installation media.
D. On the Windows Vista client computers, create a custom Microsoft Management Console, and then add the Component Services snap-in.
Answer: B

20. Your company has a main office and a branch office.
You plan to deploy a Read-only Domain Controller (RODC) in the branch office.
You need to plan a strategy to manage the RODC. Your plan must meet the following requirements:
Allow branch office support technicians to maintain drivers and disks on the RODC
Prevent branch office support technicians from managing domain user accounts
What should you include in your plan?
A. Configure the RODC for Administrator Role Separation.
B. Configure the RODC to replicate the password for the branch office support technicians.
C. Set NTFS permissions on the Active Directory database to Read & Execute for the branch office support technicians.
D. Set NTFS permissions on the Active Directory database to Deny Full Control for the branch office support technicians.
Answer: A

21. Your company has a main office and a branch office. All domain administrators are located in the main office. Two support technicians are located in the branch office.
You plan to deploy a new Windows Server 2008 server in the branch office.
You need to plan for the management of the new Windows Server 2008 server. Your plan must meet the following requirements:
Allow the support technicians to install server roles
Allow the support technicians to stop and start services
Minimize the security privileges granted to the support technicians
What should you include in your plan?
A. Add the support technicians to the Domain Admins group.
B. Assign the support technicians to the Administrators group on the new Windows Server 2008 server.
C. Configure the restricted enrollment agent on the new Windows Server 2008 server. Create a permissions list for the support technicians.
D. Place the new Windows Server 2008 server in a new organizational unit (OU). Assign the support technicians permission to modify objects in the new OU.
Answer: B

22. You plan to move 50 Windows Server 2008 servers from an existing network segment to a new network segment.
You need to recommend a method for changing the TCP/IP addresses on the 50 servers. You want to achieve this goal by using the minimum amount of administrative effort.
What should you recommend?
A. Visit each server to make the changes.
B. Run the Netsh tool from an administrators client computer.
C. Run the ServerManagerCMD tool from an administrators client computer.
D. Connect to each server by using Remote Desktop to make the changes.
Answer: B

23. Your network consists of a single Active Directory domain. The network contains five Windows Server 2008 servers that host Web applications.
You need to plan a remote management strategy to manage the Web servers. Your plan must meet the following requirements:
Allow Web developers to configure features on the Web sites
Prevent Web developers from having full administrative rights on the Web servers
What should you include in your plan?
A. Configure request filtering on each Web server.
B. Configure authorization rules for Web developers on each Web server.
C. Configure the security settings in Internet Explorer for all Web developers by using a Group Policy.
D. Add the Web developers to the Account Operators group in the domain.
Answer: B

24. Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008. The domain contains 200 Windows Server 2008 servers.
You need to plan a monitoring solution that meets the following requirements.
Sends a notification by e-mail to the administrator if an application error occurs on any of the servers
Uses the minimum amount of administrative effort
What should you include in your plan?
A. On one server, create event subscriptions for each server. On the server, attach tasks to the application error events.
B. On one server, create an Event Trace Sessions Data Collector Set. On all servers, create a System Performance Data Collector Set.
C. On all servers, create event subscriptions for one server. On all servers, attach a task for the application error events.
D. On all servers, create a System Performance Data Collector Set. On one server, configure the report settings for the new Data Collector set.
Answer: A

25. Your network contains 50 DNS servers that run Windows Server 2003. One of the DNS servers is named Server1. Server1 has Adminpak.msi installed.
Administrators use client computers that run Windows Vista. The administrators manage the DNS servers by using a Remote Desktop Connection (RDC) to connect to Server1.
You replace the 50 DNS servers with new servers that run the Server Core installation of Windows Server 2008. The Windows Server Core servers have the DNS server role installed.
You need to plan for the administration of the new DNS servers. The administrators must manage the DNS server role by using a Microsoft Management Console (MMC).
What should you include in your plan?
A. Deploy Windows PowerShell to all administrators by using a Group Policy.
B. Deploy the Windows Server 2003 Adminpak.msi file to all administrators by using a Group Policy.
C. Provide remote access to the Windows Server 2008 Server Core servers.
D. Provide remote access to a Windows Server 2008 server that has the Remote Server Administration Tools (RSAT) installed.
Answer: D

26. You plan to deploy 10 servers that will run the Server Core installation of Windows Server 2008. The servers will only be accessible by using TCP ports 80 and 443.
You need to plan for the administration of the Server Core servers to meet the following requirements:
Enable administrators to install and administer server roles remotely.
Enable administrators to fully manage the servers remotely.
What should you include in your plan?
A. On each server, use Oclist.exe.
B. On each server, use Ocsetup.exe.
C. On each server, enable Remote Desktop Connection (RDC).
D. On each server, enable Windows Remote Management (WinRM).
Answer: D

27. Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains 50 member servers that run Windows Server 2008.
An organizational unit (OU) named Branch1-Servers contains the computer objects for the servers in Branch1. A global group named Branch1-admins contains the user accounts for the administrators. Administrators maintain all member servers in Branch1.
You need to recommend a solution that allows the members of Branch1?admins group to perform the following tasks on the Branch1 member servers.
Stop and start services
Change registry settings
What should you recommend?
A. Add the Branch1-admins group to the Power Users local group on each server in Branch1.
B. Add the Branch1-admins group to the Administrators local group on each server in Branch1.
C. Assign the Branch1-admins group change permissions to the Branch1-Servers OU and to all child objects.
D. Assign the Branch1-admins group Full Control permissions on the Branch1-Servers OU and to all child objects.
Answer: B

28. Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains a member server named Server1. Server1 runs Windows Server 2008 and has the File Services server role installed.
An organizational unit (OU) named Branch1-Servers contains the computer objects for the servers in Branch1. A global group named Branch1?admins contains the user accounts for the administrators. Administrators manage the shared folders on the servers in Branch1.
You need to ensure that the members of Branch1-admins can create shared folders on Server1.
What should you do?
A. Add the Branch1-admins group to the Power Users local group on Server1.
B. Add the Branch1-admins group to the Administrators local group on Server1.
C. Assign Full Control permissions on the Branch1-Servers OU to the Branch1-admins group.
D. Assign Create Shared Folders permissions on the Branch1-Servers OU to the Branch1-admins group.
Answer: B

29. Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains a Read-only Domain Controller (RODC) named Server1. A global group named Branch1?admins contains the user accounts for administrators. Administrators manage the client computers and servers in Branch1.
You need to recommend a solution for delegating control of Server1. Your solution must meet the following requirements:
Allow the members of the Branch1-admins group to administer Server1; including, change device drivers and install operating system updates by using Windows Update.
Provide the Branch1-admins group rights on Server1 only.
Prevent Branch1-admins group from modifying Active Directory objects.
What should you recommend?
A. Add the Branch1-admins global group to the Server Operators domain local group.
B. Add the Branch1-admins global group to the Administrators local group of Server1.
C. Grant Full Control permission on the Server1 computer object in the domain to the Branch1-admins group.
D. Move the Server1 computer object to a new organizational unit (OU) named Branch1-servers. Grant Full Control permission on the Branch1-servers OU to the Branch1-admins group.
Answer: B

30. Your network consists of a single Active Directory forest. The forest functional level is Windows Server 2008. The forest contains two domains named contoso.com and na.contoso.com.
Contoso.com contains a user named User1. Na.contoso.com contains an organizational unit (OU) named Security.
You need to give User1 administrative rights so that he can manage Group Policies for the Security OU. You want to achieve this goal while meeting the following requirements:
User1 must be able to create and configure Group Policies in na.contoso.com.
User1 must be able to link Group Policies to the Security OU.
User1 must be granted the least administrative rights necessary to achieve the goal.
What should you do?
A. Add User1 to the Administrators group for na.contoso.com.
B. Add User1 to the Group Policy Creator Owners group in contoso.com. Modify the permissions on the Security OU.
C. Run the Delegation of Control Wizard on the Security OU. In the Group Policy Management Console, modify the permissions of the Group Policy Objects container in the na.contoso.com domain.
D. Run the Delegation of Control Wizard on na.contoso.com. In the Group Policy Management Console, modify the permissions of the Group Policy Objects container in the contoso.com domain.
Answer: C