kaoccna 的优势

70-647 试题的质量和价值
mcsepass 模拟测试题具有最高的专业技术含量，只供具有相关专业知识的专家和学者学习和研究之用。
100% 保证您通过 70-647 的考试
如果你使用 mcsepass 模拟测试，我们将保证你的第一次参加考试即取得成功，否则，我们将全额退款！
试用后再购买
mcsepass 提供每种产品免费测试。在您决定购买之前，请检测联接，可能存在的问题及试题质量和适用性。
kaoccna认证考试题库网专业提供 Microsoft 70-647 最新题库下载，完全覆盖 mcsepass 考试原题。

部分考题展示

　
　
Exam : Microsoft 70-647
Title : Pro: Windows Server 2008,Enterprise Administrator


1. Your network consists of one Active Directory forest that contains one root domain and 10 child domains.
Administrators of the child domains frequently modify the records for authoritative DNS servers for the child domain DNS zones.
You need to recommend a solution to minimize the amount of manual configuration steps required to maintain name resolution on the network.
What should you recommend?
A. On the child domain DNS servers, create stub zones for the root domain zone.
B. On the child domain DNS servers, configure conditional forwarders for the parent domain.
C. On the root domain DNS servers, create stub zones for the child domain zones.
D. On the root domain DNS servers, configure delegation subdomain records for the child domains.
Answer: C

2. Your network consists of one Active Directory domain and one IP subnet. All servers run Windows Server 2008. All client computers run Windows Vista.
The servers are configured as shown in the following table.
All network switches used for client connections are unmanaged.
Some users connect to the local area network (LAN) from client computers that are joined to a workgroup. Some client computers do not have the latest Microsoft updates installed.
You need to recommend a Network Access Protection (NAP) solution to protect the network. The solution must meet the following requirements:
Only computers that are joined to the domain must be able to connect to servers in the domain.
Only computers that have the latest Microsoft updates installed must be able to connect to servers in the domain.
Which NAP enforcement method should you use?
A. 802.1x
B. DHCP
C. IPsec
D. virtual private network (VPN)
Answer: C

3. Your company has a main office and two branch offices. The network contains one Active Directory domain named contoso.com.
All domain controllers and DNS servers for the contoso.com domain are located in the main office. All DNS servers are member servers.
You plan to deploy two new Active Directory domains named east.contoso.com and west.contoso.com in the branch offices.
You install a DNS server in each branch office.
You need to prepare the environment for the installation of the new domains.
What should you do next?
A. Create a new standard primary zone on each branch office DNS server for the new domains. Configure forwarders on the main office DNS servers to point to the branch office servers.
B. Create a new stub zone on each branch office DNS server for the new domains. Configure conditional forwarders on the main office DNS servers to point to the branch office DNS servers.
C. Configure a delegation subdomain DNS record on the main office DNS server for each new domain. Configure a stub zone on each branch office DNS server for the new domains. Configure zone transfer for the contoso.com zone to the branch office DNS servers.
D. Configure a delegation subdomain DNS record on the main office DNS server for each new domain. Create a new standard primary zone on each branch office DNS server for the new domains. Configure zone transfer for the contoso.com zone to the branch office DNS servers.
Answer: D

4. Your company has a main office and three branch offices.
Each office has a server that runs Windows Server 2008. The server has the DNS Server role installed. The branch offices contain client computers that run Windows 2000.
You plan to deploy Active Directory Domain Services (AD DS) on the network.
You need to plan a name resolution solution for the deployment of Active Directory Domain Services (AD DS). The solution must meet the following requirements:
Support secure dynamic updates.
Minimize response times for users connecting to resources anywhere on the network.
What should you include in your plan?
A. A GlobalNames zone for the forest.
B. A single Active Directory-integrated DNS zone.
C. A stub zone on the DNS server in each branch office.
D. A standard primary zone in the main office and secondary zones in each branch office.
Answer: B

5. Your network consists of one Active Directory domain and one IP subnet. All servers run Windows Server 2008. All client computers run Windows Vista, Windows XP Professional, and Windows 2000 Professional.
The servers are configured as shown in the following table.
Server2 is configured to support Network Access Protection (NAP) by using IPsec, DHCP, and 802.1x enforcement methods.
Users from a partner company have computers that are not joined to the domain. The computers successfully connect to the network.
You need to ensure that only computers that are joined to the domain can access network resources on the domain.
What should you do?
A. Configure all DHCP scopes on Server1 to enable NAP.
B. Configure all network switches to require 802.1x authentication.
C. Create a Group Policy object (GPO) and link it to the domain. In the GPO, enable a secure server IPsec policy on all member servers in the domain.
D. Create a Group Policy object (GPO) and link it to the domain. In the GPO, enable a NAP enforcement client for IPsec communications on all client computers in the domain.
Answer: C

6. Your network consists of one Active Directory forest that contains one root domain and 22 child domains.
All domain controllers run Windows Server 2003. All domain controllers run the DNS Server service and host Active Directory-integrated zones.
Administrators report that it takes more than one hour to restart the DNS servers.
You need to reduce the time it takes to restart the DNS servers.
What should you do?
A. Upgrade all domain controllers to Windows Server 2008.
B. Upgrade all domain controllers in the root domain to Windows Server 2008, and then set the functional level for the root domain to Windows Server 2008.
C. Deploy new secondary zones on additional servers in each child domain.
D. Change the Active Directory-integrated DNS zones to standard primary zones.
Answer: A

7. Your company has one main office and one branch office. The branch office is connected to the main office by using a wide area network (WAN) link. The network consists of one Active directory domain.
The branch office has two member servers that run Windows Server 2008. One of the servers is configured as a file server that hosts shared folders.
The branch office has a local administrator. The main office has one standard primary DNS zone that is hosted on a DNS server.
The branch office grows from 100 client computers to 1,000 client computers.
You need to recommend a name resolution solution for the branch office to meet the following requirements:
Users must be able to access file shares on the local server if a WAN link fails.
The branch office administrator must be able to modify Active Directory objects while at the branch office if a WAN link fails.
What should you recommend?
A. Promote the member server to a domain controller and configure the DNS role. Create a standard secondary zone.
B. Promote the member server to a domain controller and configure the DNS role. Create a new standard primary zone.
C. Promote the member server to a read-only domain controller (RODC) and configure the DNS role. Create a primary read-only zone.
D. Promote the member server to a read-only domain controller (RODC) and configure the DNS role. Create a new standard secondary zone.
Answer: A

8. Your company has a main office and a new branch office. The network consists of one Active directory domain.
The branch office contains two member servers that run Windows Server 2008. One of the servers is configured as a file server that hosts shared folders. An administrator in the branch office is responsible for maintaining the servers.
You have a single DNS zone that is hosted on a DNS server located in the main office.
A wide area network (WAN) link between the branch office and the main office is unreliable.
You need to recommend a network services solution for the new branch office. The solution must meet the following requirements:
Users must be able to log on to the domain if a WAN link fails.
Users must be able to access file shares on the local server if a WAN link fails.
Branch office administrators must be prevented from initiating changes to Active Directory.
Branch office administrators must be able to make configuration changes to the servers in the branch office.
What should you recommend?
A. Promote the member server to a domain controller and add the branch office administrators to the Domain Admins group.
B. Promote the member server to a read-only domain controller (RODC) and add the branch office administrators to the Domain Admins group.
C. Promote the member server to a read-only domain controller (RODC) and configure the DNS role. Delegate administrative rights to the local branch office administrator.
D. Promote the member server to a domain controller and configure the DNS role. Create an organizational unit (OU) for each branch office and delegate administrative rights to the local branch office administrator.
Answer: C

9. Your company has one office in San Diego and one office in New York.
The network consists of one Active Directory forest that contains one domain named contoso.com and one domain named newyork.contoso.com. All servers run Windows Server 2008. All domain controllers for contoso.com are located in San Diego. All domain controllers for newyork.contoso.com are located in New York.
Contoso.com contains two domain controllers named Server1 and Server2. Newyork.contoso.com contains two domain controllers named Server3 and Server4. All domain controllers host Active Directory-integrated DNS zones for their respective domains.
You need to ensure that users from each office can resolve computer names for both domains from a local DNS server.
What should you do?
A. Add the contoso.com and the newyork.contoso.com DNS zones to the ForestDNSZones partition.
B. Create a stub DNS zone for contoso.com on Server3. Create a stub DNS zone for newyork.contoso.com on Server1.
C. Create a standard primary DNS zone named contoso.com on Server3. Create a standard primary DNS zone named newyork.contoso.com on Server1.
D. Configure conditional forwarders on Server1 to point to Server3. Configure conditional forwarders on Server3 to point to Server1.
Answer: A

10. Your network consists of one Active Directory domain. The domain contains servers that run Windows Server 2008.
The servers are configured as shown in the following table.
Server2 and Server3 are configured as RADIUS clients.
You need to plan a solution to manage all VPN connections to the network. The solution must meet the following requirements:
Specify the allowed VPN connection protocols.
Specify the allowed VPN client authentication mechanisms.
Specify VPN client access rights based on group membership.
What should you include in your plan?
A. a Group Policy object (GPO) applied to Server2 and Server3
B. a Group Policy object (GPO) applied to the computers that must establish VPN connections
C. a local computer policy on Server2 and Server3
D. a network policy on Server4
Answer: D

11. Your network consists of one Active Directory domain. The domain contains servers that run Windows Server 2008.
The servers are configured as shown in the following table.
All client computers run Windows Vista Service Pack 1 (SP1).
Remote domain users at a customer site report that they can access Server2 from the Internet by using the URL https://portal.contoso.com. They also report that a firewall at the customer site prevents all other outbound connections.
You need to implement a solution to enable remote users to access files on Server3 from a VPN connection.
Which connection should you enable on Server1?
A. IPsec tunnel mode
B. L2TP
C. PPTP
D. Secure Socket Tunneling Protocol (SSTP)
Answer: D

12. Your company has one office in Montreal and one office in New York. Each office has 2,000 client computers configured as DHCP clients. DHCP relay is not supported on the network routers.
The network consists of one Active Directory domain.
You need to recommend a DHCP addressing solution for both offices. The solution must meet the following requirements:
Minimize traffic between offices.
Be available if a single server fails.
What should you recommend?
A. In each office, install a DHCP server that has two scopes.
B. In each office, install a DHCP instance on a two node failover cluster.
C. In the Montreal office, install a DHCP server. In the New York office, install a DHCP Relay Agent.
D. In the Montreal office, install a DHCP instance on a two node failover cluster. In the New York office, install a DHCP Relay Agent.
Answer: B

13. Your network consists of a single IP subnet. All servers and client computers connect to managed switches. All servers run Windows Server 2008. All client computers run Windows Vista.
The servers on the network are configured as shown in the following table.
You need to prepare the Network Access Protection (NAP) environment to meet the following requirements:
Computers that have the required Microsoft updates installed must be able to access all computers on the network.
Network switches must first allow client computers to communicate to only Server1 and Server2 when the computers connect to the network.
Which NAP enforcement method should you use?
A. 802.1x
B. DHCP
C. IPsec communications
D. VPN
Answer: A

14. Your network consists of one Active Directory forest that contains 20 domain trees. All DNS servers run Windows Server 2008. The network is configured as an IPv4 network.
Users connect to network applications in all domains by using a NetBIOS name.
You plan to migrate to an IPv6-enabled only network.
You need to recommend a solution to migrate the network to IPv6. The solution must not require any changes to client computers.
What should you recommend?
A. On the DNS servers, configure GlobalNames zones.
B. On the DNS servers, add all domain zones to the ForestDNSZones partition.
C. On a new server, install and configure a Windows Server 2008 WINS server.
D. On a new server, install and configure a Windows Server 2003 WINS server.
Answer: A