New Official 70-646 Study Guide PDF Free Shared By Braindump2go Today (131-140)

MICROSOFT NEWS: 70-646 Exam Questions has been Updated Today! Get Latest 70-646 VCE and 70-646 PDF Instantly! Welcome to Download the Newest Braindump2go 70-646 VCE&70-646 PDF Dumps: http://www.braindump2go.com/70-646.html (283 Q&As)

Try 2015 Latet Updated 70-646 Practice Exam Questions and Answers, Pass 70-646 Actual Test 100% in 2015 New Year! Braindump2go Latest released Free Sample 70-646 Exam Questions are shared for instant download! Braindump2go holds the confidence of 70-646 exam candiates with Microsoft Official Guaranteed 70-646 Exa Dumps Products! 283 New Updated Questions and Answers! 2015 Microsoft 70-646 100% Success!

Exam Code: 70-646
Exam Name Windows Server 2008, Server Administrator
Certification Provider: Microsoft
Corresponding Certifications: MCSA, MCSA: Windows Server 2008, MCSE, MCSE: Private Cloud Windows Server 2008

70-646 Dumps,70-646 Study Guide,70-646 Exam Questions,70-646 eBook,70-646 eBook PDF,70-646 Dumps PDF,70-646 Dumps Latest,70-646 Book,70-646 Braindumps,70-646 Braindump PDF,70-646 Braindump Free,70-646 Practice Test,70-646 Practice Questions,70-646 PDF eBook,70-646 PDF,70-646 VCE

QUESTION 131
You need to ensure that Web1, Web2, and Web3 download updates from WSUS1.
What should you do?

A.    Modify the Default Domain Policy Group Policy object (GPO).
B.    Modify the local computer policy on Web1, Web2, and Web3.
C.    Import a security policy template toWeb1, Web2, and Web3.
D.    Create a service location (SRV) record in the _msdcs.graphicsdesigninstitute.com DNS zone.

Answer: B
Explanation:
Servers belong to a work group so WSUS policy can’t be applied using AD GPO.
But the local security policy can be modified to point to the WSUS server

QUESTION 132
Which NAP enforcement method should you recommend?

A.    802.1x
B.    DHCP
C.    IPSec
D.    VPN

Answer: C

QUESTION 133
You need to recommend the server configurations for the new failover cluster.
The configurations must support the company’s planned changes.
Which two actions should you recommend? (Each correct answer presents part of the solution. Choose two.)

A.    From HyperV Manager on each node, configure one virtual network.
B.    From HyperV Manager on one node, configure two virtual networks.
C.    Install one network adapter on each node.
Configure the network adapters to use multiple IP addresses.
D.    Install two network adapters on each node.
Configure the network adapters to communicate on separate subnets.

Answer: AD
Explanation:
There’s only a need for one virtual network because a virtual network is the same as a virtual switch and there is no requirement for a separate switch your requirement is to have inter cluster network traffic isolated from other network traffic by creating separate subnets you can ensure that cluster related traffic remains on one subnet while regular network traffic is carried on the other subnet

QUESTION 134
You need to ensure that Admin2 can administer Active Directory to meet the company’s technical requirements.
What should you do?

A.    Add Admin2 to the Domain Admins global group.
B.    Add Admin2 to the Backup Operators domain local group.
C.    Delegate full control ofall objects in graphicdesigninstitute.com to Admin2.
D.    Delegate full control of all objects in the Domain Controllers organizational unit (OU) to
Admin2.

Answer: A
Explanation:
You can enable Active Directory Recycle Bin only if the forest functional level of your environment is set to Windows Server 2008 R2.
Membership in Domain Admins, or equivalent, is the minimum required to use AD recycle bin

QUESTION 135
You need to recommend a solution for the Web server content that meets the company’s technical requirements.
What should you include in the recommendation?

A.    Distributed File System (DFS) Replication
B.    folder redirection
C.    HTTP redirection
D.    IIS Shared Configuration

Answer: D
Explanation:
AD is a prerequisite for DFS and we have workgroup in the perimeter network
By using Shared Configuration, you can share your IIS configuration across multiple servers.
Please note that this article is focused on the back end configuration of the web servers and not the front end task of load balancing the servers.
Shared Configuration allows you to set up Internet Information Services (IIS) quickly and easily on multiple servers so that the sites, application pools and IIS server settings are consistent across two or more servers.
You only have to configure a server one time and then you can replicate the IIS settings.
Shared Configuration is not for individual sites on a server but for the entire IIS configuration on a server.

QUESTION 136
You need to ensure that Admin1 can administer the Web servers to meet the company’s technical requirements.
To which group should you add Admin1?

A.    the Administrators local group on each Web server
B.    the Backup Operators domain local group
C.    the Backup Operators local group on each Web server
D.    the Domain Admins global group

Answer: C
Explanation:
The requirements are:
Restarting all of the Web servers.
Backing up and restoring the files on all of the Web servers
Backup Operators
Members of this group can back up and restore files on a computer, regardless of any permissions that protect those files. This is because the right to perform a backup takes precedence over all file permissions. Members of this group cannot change security settings.
1. Access this computer from the network
2. Allow logon locally
3. Back up files and directories
4. Bypass traverse checking
5. Log on as a batch job
6. Restore files and directories
7. Shut down the system

Case Study 6 – Lucerne Publishing (QUESTION 137 – QUESTION 148)
COMPANY OVERVIEW
Overview
Lucerne Publishing is a large publishing company that produces both traditional books and e-books.
Physical Location
The company has a main office and a branch office.
The main office is located in New York.
The branch office is located in San Francisco.
The main office has a satellite office located in Boston.
The company has 7,500 users.
EXISTING ENVIRONMENT
Active Directory Environment
The network contains an Active Directory forest.
The forest contains a single domain named lucernepublishing.com.
Network Infrastructure
Client computers in the New York office and the San Francisco office run either Windows Vista or Windows XP.
All client computers in the Boston office run Windows 7.
The company has a finance department.
All of the client computers in the finance department run Windows XP.
The finance department uses an application named App1.
App1 only runs on Windows XP.
The relevant servers in the New York office are configured as shown in the following table.

The servers have the following configurations:
– Remote Desktop is enabled on all servers.
– The passwords for all service accounts are set to never expire.
– Server1 stores roaming user profiles for users in the Boston office.
– SQL1 and SQL2 are deployed in a two-node failover cluster named Cluster1.
– All servers have Pre-Boot Execution Environment (PXE)-compliant network adapters.
– The servers in the San Francisco office contain neither a recovery partition nor optical media drives.
– DFS1 and DFS2 are members of the same DFS Replication group. The DFS namespace is configured to use Windows 2000 Server mode.
The Boston office has no servers.
The Boston office connects to the New York office by using a dedicated hardware VPN device.
The finance department publishes monthly forecast reports that are stored in DFS.
REQUIREMENTS
Business Goals
Lucerne Publishing must minimize administrative costs, hardware costs, software costs, and development costs, whenever possible.
Planned Changes
– All client computers will be upgraded to Windows 7.
– A VPN server will be deployed in the main office. All VPN clients must have the latest Windows updates before they can access the internal network.
– You plan to deploy a server that has the Remote Desktop Gateway (RD Gateway) role service installed.
Technical Requirements
Lucerne Publishing must meet the following technical requirements:
– Upgrade all client computers to Windows 7.
– Minimize Group Policy-related replication traffic.
– Ensure that App1 can be used from client computers that run Windows 7.
– Ensure that users can use App1 when they are disconnected from the network.
– Ensure that you can perform a bare metal recovery of the servers in the San Francisco office.
– Minimize the amount of time it takes users in the Boston office to log on to their client computers.
– Ensure that domain administrators can connect remotely to all computers in the domain through RD Gateway.
– Ensure that file server administrators can access DFS servers and file servers through the RD Gateway.
– Prevent file server administrators from accessing other servers through the RD Gateway.
Security Requirements
Lucerne Publishing must meet the following security requirements:
– USB storage devices must not be used on any servers.
– The passwords for all user accounts must be changed every 60 days.
– Users must only be able to modify the financial forecast reports on DFS1. DFS2 must contain a read-only copy of the financial forecast reports.
– All operating system drives on client computers that run Windows 7 must be encrypted.
– Only approved USB storage devices must be used on client computers that run Windows 7.

QUESTION 137
You need to recommend a solution for managing Group Policy that meets the company’s technical requirements.
What should you recommend?

A.    Implement a central store.
B.    Upgrade DC3 to Windows Server 2008 R2.
C.    Create starter Group Policy objects (GPOs).
D.    Deploy Advanced Group Policy Management (AGPM).

Answer: A
Explanation:
http://msdn.microsoft.com/en-us/library/bb530196.aspx
Create a Central Store
The central store is a folder structure created in the sysvol directory on the domain controllers in each domain in your organization. You will need to create the central store only once on a single domain controller for each domain in your organization. The File Replication service then replicates the central store to all domain controllers. It is recommended that you create the central store on the primary domain controller because the Group Policy Management Console and
Group Policy Object Editor connect to the primary domain controller by default.
The central store consists of a root-level folder containing all language-neutral ADMX files and subfolders containing the language-specific ADMX resource files.

QUESTION 138
You need to recommend which role services must be deployed to support the company’s planned changes.
Which two role services should you recommend? (Each correct answer presents part of the solution. Choose two.)

A.    Health Registration Authority (HRA)
B.    Host Credential Authorization Protocol (HCAP)
C.    Network Policy Server (NPS)
D.    Routing and Remote Access service (RRAS)

Answer: CD

QUESTION 139
You need to recommend a solution for the USB storage devices on the client computers.
The solution must meet the company’s security requirements.
What should you include in the recommendation?

A.    Encrypted File System (EFS)
B.    the AppLocker Group Policy settings
C.    the Enhanced Storage Access settings
D.    Windows BitLocker Drive Encryption (BitLocker)

Answer: C

QUESTION 140
You need to recommend a solution for managing the service accounts for SQL1 and SQL2.
The solution must meet the company’s security requirements.
What should you include in the recommendation?

A.    a custom password filter
B.    a Password Settings object (PSO)
C.    managed service accounts
D.    manual password changes

Answer: D
Explanation:
req-passwords to change every 60 days.
Service account passwords are set to never expire so cannot meet the above requirement, so manual intervention is required.


70-646 Updated Questions are 2015 Latest Released Which 100% will Meet in Your 70-646 Test! Braindump2go New Released 70-646 Exam Dumps Contain All New Added Questions Which Will Help you Have A Totally Success in 2015 New Tear! Download our 100% Pass Guaranteed 70-646 Exam Dumps Full Version, special 10% Off Discount enjoyed!

FREE DOWNLOAD: NEW UPDATED 70-646 PDF Dumps & 70-646 VCE Dumps from Braindump2go: http://www.braindump2go.com/70-646.html (283 Q&As)