[OFFICIAL]Braindump2go 70-646 Dumps PDF Download (21-30)

MICROSOFT NEWS: 70-646 Exam Questions has been Updated Today! Get Latest 70-646 VCE and 70-646 PDF Instantly! Welcome to Download the Newest Braindump2go 70-646 VCE&70-646 PDF Dumps: http://www.braindump2go.com/70-646.html (283 Q&As)

Braindump2go New Published Microsoft 70-646 Dumps PDF Contanins the latest questions from Microsoft Exam Center! 100% Certification got guaranteed!

Exam Code: 70-646
Exam Name Windows Server 2008, Server Administrator
Certification Provider: Microsoft
Corresponding Certifications: MCSA, MCSA: Windows Server 2008, MCSE, MCSE: Private Cloud Windows Server 2008

70-646 Dumps,70-646 Study Guide,70-646 Exam Questions,70-646 eBook,70-646 eBook PDF,70-646 Dumps PDF,70-646 Dumps Latest,70-646 Book,70-646 Braindumps,70-646 Braindump PDF,70-646 Braindump Free,70-646 Practice Test,70-646 Practice Questions,70-646 PDF eBook,70-646 PDF,70-646 VCE

QUESTION 21
Your network consists of a single Active Directory domain.
All servers run Windows Server 2008 R2.
You need to recommend a Group Policy deployment strategy.
Your strategy must support the following requirements:
- Domainlevel Group Policy objects (GPOs) must not be overwritten by organizational unit (OU) level GPOs.
- OUlevel GPOs must not apply to members of the Server Operators group.
What should you recommend?

A.    Enable Block Inheritance for the domain, and then modify the permissions of all GPOs linked
to OUs.
B.    Enable Block Inheritance for the domain, and then enable Loopback Processing policy mode.
Add the Server Operators group to the Restricted Groups list.
C.    Set all domain level GPOs to Enforced, and then modify the permissions of the GPOs that are
linked to OUs.
D.    Set all domain level GPOs to Enforced, and then enable Loopback Processing policy mode.
Add the Server Operators group to the Restricted Groups list.

Answer: C
Explanation:
http://www.petri.co.il/working_with_group_policy.htm ^{4 1}
http://technet.microsoft.com/en-us/library/bb742376.aspx ²

Linking a GPO to Multiple Sites, Domains, and OUs
This section demonstrates how you can link a GPO to more than one container (site, domain, or
OU) in the Active Directory. Depending on the exact OU configuration, you can use other methods to achieve similar Group Policy effects; for example, you can use security group filtering or you can block inheritance. In some cases, however, those methods do not have the desired affects.
Whenever you need to explicitly state which sites, domains, or OUs need the same set of policies, use the method outlined below:
To link a GPO to multiple sites, domains, and OUs
1. Open the saved MMC console GPWalkthrough, and then double-click the Active Directory User and Computers node.
2. Double-click the reskit.com domain, and double-click the Accounts OU.
3. Right-click the Headquarters OU, select Properties from the context menu, and then click the Group Policy tab.
4. In the Headquarters Properties dialog box, on the Group Policy tab, click New to create a new GPO named Linked Policies.
5. Select the Linked Policies GPO, and click the Edit button.
6. In the Group Policy snap-in, in the User Configuration node, under Administrative Templates node, click Control Panel, and then click Display.
7. On the details pane, click the Disable Changing Wallpaper policy, and then click Enabled in the Disable Changing Wallpaper dialog box and click OK.
8. Click Close to exit the Group Policy snap-in.
9. In the Headquarters Properties page, click Close.
Next you will link the Linked Policies GPO to another OU.
1. In the GPWalkthrough console, double-click the Active Directory User and Computers node, double-click the reskit.com domain, and then double-click the Accounts OU.
2. Right-click the Production OU, click Properties on the context menu, and then click the Group Policy tab on the Production Properties dialog box.
3. Click the Add button, or right-click the blank area of the Group Policy objects links list, and select Add on the context menu.
4. In the Add a Group Policy Object Link dialog box, click the down arrow on the Look in box, and select the Accounts.reskit.com OU.
5. Double-click the Headquarters.Accounts.reskit.com OU from the Domains, OUs, and linked Group Policy objects list.
6. Click the Linked Policies GPO, and then click OK.
You have now linked a single GPO to two OUs. Changes made to the GPO in either location result in a change for both OUs. You can test this by changing some policies in the Linked Policies GPO, and then logging onto a client in each of the affected OUs, Headquarters and Production.

QUESTION 22
Your network contains several Windows Server 2008 R2 servers that run Windows Server Update Services (WSUS).
The WSUS servers distribute updates to all computers on the internal network.
Remote users connect from their personal computers to the internal network by using a splittunnel VPN connection.
You need to plan a strategy for patch management that deploys updates on the remote users' computers.
Your strategy must meet the following requirements:
- Minimize bandwidth use over the VPN connections
- Require updates to be approved on the WSUS servers before they are installed on the client computers.
What should you include in your plan?

A.    Create a Group Policy object (GPO) to perform clientside targeting.
B.    Create a computer group for the remote users' computers.
Configure the remote users' computers to use the internal WSUS server.
C.    Create a custom connection by using the Connection Manager Administration Kit (CMAK).
Deploy the custom connection to all of the remote users' computers.
D.    Deploy an additional WSUS server.
Configure the remote users' computers to use the additional WSUS server.
Configure the additional WSUS server to leave the updates on the Microsoft Update Web site.

Answer: D
Explanation:
Performance and Bandwidth Optimization
Branch offices with slow WAN connections to the central server but broadband connections to the Internet can be configured to get metadata from the central server and update content from the Microsoft Update Web site.

QUESTION 23
Your network consists of three Active Directory forests.
Forest trust relationships exist between all forests.
Each forest contains one domain.
All domain controllers run Windows Server 2008 R2.
Your company has three network administrators.
Each network administrator manages a forest and the Group Policy objects (GPOs) within that forest.
You need to create standard GPOs that the network administrators in each forest will use.
The GPOs must meet the following requirements:
- The GPOs must only contain settings for either user configurations or computer configurations.
- The number of GPOs must be minimized.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.    Export the new GPOs to .cab files.
Ensure that the .cab files are available to the network administrator in each forest.
B.    Create two new GPOs.
Configure both GPOs to use the required user configurations and the required computer
configurations.
C.    Create two new GPOs.
Configure one GPO to use the required user configuration.
Configure the other GPO to use the required computer configuration.
D.    Back up the Sysvol folder that is located on the domain controller where the new GPOs were
created. Provide the backup to the network administrator in each forest.

Answer: AC
Explanation:
http://technet.microsoft.com/en-us/library/ee390958.aspx ³
http://www.petri.co.il/working_with_group_policy.htm ^{4 1}
Export a GPO to a File
Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2
You can export a controlled Group Policy object (GPO) to a CAB file so that you can copy it to a domain in another forest and import the GPO into Advanced Group Policy Management (AGPM) in that domain. For information about how to import GPO settings into a new or existing GPO, see Import a GPO from a File.
A user account with the Editor or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management (AGPM) is required to complete this procedure.
Review the details in "Additional considerations" in this topic.
To export a GPO to a file
1. In the Group Policy Management Console tree, click Change Control in the forest and domain in which you want to manage GPOs.
2. On the Contents tab, click the Controlled tab to display the controlled GPOs.
3. Right-click the GPO, and then click Export to.
4. Enter a file name for the file to which you want to export the GPO, and then click Export.
If the file does not exist, it is created. If it already exists, it is replaced.
Additional considerations
- By default, you must be an Editor or an AGPM Administrator (Full Control) to perform this procedure. Specifically, you must have List Contents, Read Settings, and Export GPO permissions for the GPO.
Group Policy sections
Each GPO is built from 2 sections:
- Computer configuration contains the settings that configure the computer prior to the user logon combo-box.
- User configuration contains the settings that configure the user after the logon.
You cannot choose to apply the setting on a single user, all users, including administrator, are affected by the settings.

QUESTION 24
Your company has a branch office that contains a Windows Server 2008 R2 server.
The server runs Windows Server Update Services (WSUS).
The company opens four new satellite offices.
Each satellite office connects to the branch office by using a dedicated WAN link.
You need to design a strategy for patch management that meets the following requirements:
- WSUS updates are approved from a central location.
- WAN traffic is minimized between the branch office and the satellite offices.
What should you include in your design?

A.    In each satellite office, install a WSUS server.
Configure each satellite office WSUS server as a replica of the branch office WSUS server.
B.    In each satellite office, install a WSUS server.
Configure each satellite office WSUS server as an autonomous server that synchronizes to
the branch office WSUS server.
C.    On the branch office WSUS server, create a computer group for each satellite office.
Add the client computers in each satellite office to their respective computer groups.
D.    For each satellite office, create an organizational unit (OU).
Create and link a Group Policy object (GPO) to each OU.
Configure different schedules to download updates from the branch office WSUS server to
the client computers in each satellite office.

Answer: A
Explanation:
Replica Mode and Autonomous Mode
You have two options when configuring the administration model for your organization's downstream WSUS servers. The first option, shown in Figure 8-5, is to configure the downstream WSUS server as a replica of the upstream server. When you configure a WSUS server as a replica, all approvals, settings, computers, and groups from the upstream server are used on the downstream server. The downstream server cannot be used to approve updates when configured in replica mode, though you can change a replica server to the second mode—called autonomous mode—if an update urgently needs to be deployed.

Figure 8-5Downstream replica server

QUESTION 25
Your network contains an Active Directory domain.
You have a server that runs Windows Server 2008 R2 and has the Remote Desktop Services server role enabled.
All client computers run Windows 7.
You need to plan the deployment of a new line of business application to all client computers.
The deployment must meet the following requirements:
- Users must access the application from an icon on their desktops.
- Users must have access to the application when they are not connected to the network.
What should you do?

A.    Publish the application as a RemoteApp.
B.    Publish the application by using Remote Desktop Web Access (RD Web Access).
C.    Assign the application to the Remote Desktop Services server by using a Group Policy
object (GPO).
D.    Assign the application to all client computers by using a Group Policy object (GPO).

Answer: D
Explanation:
http://support.microsoft.com/kb/816102 ⁵
Assign a Package
To assign a program to computers that are running Windows Server 2003, Windows 2000, or Microsoft Windows XP Professional, or to users who are logging on to one of these workstations:
1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the console tree, right-click your domain, and then click Properties.
3. Click the Group Policy tab, select the group policy object that you want, and then click Edit.
4. Under Computer Configuration, expand Software Settings.
5. Right-click Software installation, point to New, and then click Package.
6. In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example, \file serversharefile name.msi.
Important Do not use the Browse button to access the location. Make sure that you use the UNC path to the shared installer package.
7. Click Open.
8. Click Assigned, and then click OK.
The package is listed in the right pane of the Group Policy window.
9. Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.
10. When the client computer starts, the managed software package is automatically installed.

QUESTION 26
Your company has a branch office that contains a Windows Server 2008 R2 computer.
The Windows Server 2008 R2 computer runs Windows Server Update Services (WSUS).
The WSUS server is configured to store updates locally.
The company opens four new satellite offices.
Each satellite office connects to the branch office by using a dedicated WAN link.
Internet access is provided through the branch office.
You need to design a strategy for patch management that meets the following requirements:
- WSUS updates are approved independently for each satellite office.
- Internet traffic is minimized.
What should you include in your design?

A.    In each satellite office, install a WSUS server.
Configure each satellite office WSUS server as an autonomous server.
B.    In each satellite office, install a WSUS server.
Configure each satellite office WSUS server as a replica of the branch office WSUS server.
C.    In each satellite office, install a WSUS server.
Configure each satellite office WSUS server to use the branch office WSUS server as an
upstream server.
D.    For each satellite office, create organizational units (OUs).
Create and link the Group Policy objects (GPOs) to the OUs.
Configure different schedules to download updates from the branch office WSUS server to
the client computers in each satellite office.

Answer: C

QUESTION 27
Your network contains a single Active Directory domain.
You have 100 servers that run Windows Server 2008 R2 and 5,000 client computers that run Windows 7.
You plan to deploy applications to the client computers.
You need to recommend an application deployment strategy that meets the following requirements:
- Applications must be deployed only to client computers that meet the minimum hardware requirements.
- Deployments must be scheduled to occur outside business hours.
- Detailed reports on the success or failure of the application deployments must be provided.
What should you recommend?

A.    Deploy applications by using Group Policy.
B.    Implement Windows Server Update Services (WSUS).
C.    Implement Microsoft System Center Operations Manager (SCOM) 2007 R2.
D.    Implement Microsoft System Center Configuration Manager (SCCM) 2007 R2.

Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/bb680651.aspx ⁶
Welcome to Microsoft System Center Configuration Manager 2007. Configuration Manager 2007 contributes to a more effective Information Technology (IT) department by enabling secure and scalable operating system and application deployment and desired configuration management, enhancing system security, and providing comprehensive asset management of servers, desktops, and mobile devices.
Post-Setup Configuration Tasks
After Setup has run, there are still a few tasks you must perform to have a functioning Configuration Manager 2007 site. For example, you might need to assign new site system roles and install clients. For more information, see Checklist for Required Post Setup Configuration Tasks.
Common Configuration Manager Tasks
For more information about how to do common Configuration Manager 2007 tasks, see the following topics.

QUESTION 28
Your network consists of a single Active Directory domain.
Users access and share documents by using a DFS namespace.
You need to recommend a solution to manage user access to documents.
The solution must meet the following requirements:
- Allow for document versioning
- Allow for online collaboration
What should you recommend?

A.    File Server Resource Manager (FSRM)
B.    Volume Shadow Copy Service (VSS)
C.    Microsoft SharePoint Foundation 2010
D.    Windows System Resource Manager (WSRM)

Answer: C
Explanation:
sharepoint allows collaboration and versioning
http://www.plusconsulting.com/WhitePapers/SharePoint%202010%20Business%20Value%20WhitePaper.pdf ⁷

QUESTION 29
Your company has a main office and two branch offices.
Each office has a domain controller and file servers.
Your network consists of a single Active Directory domain.
All servers run Windows Server 2008 R2.
You need to plan the deployment of Distributed File System (DFS) to meet the following requirements:
- Ensure that users see only the folders to which they have access
- Ensure that users can access the data locally
- Minimize the bandwidth required to replicate data
What should you include in your plan?

A.    Deploy a standalone DFS namespace.
Enable accessbased enumeration and use DFS Replication.
B.    Deploy a standalone DFS namespace.
Enable accessbased enumeration and use File Replication Service (FRS).
C.    Deploy a domainbased DFS namespace and use DFS Replication.
Modify each share to be a hidden share.
D.    Deploy a domainbased DFS namespace and use File Replication Service (FRS).
Modify each share to be a hidden share.

Answer: A
Explanation:
MCITP Self-Paced Training Kit Exam 70-646 Windows Server Administration:
Distributed File System (DFS) DFS is considerably enhanced in Windows Server 2008.
It consists of two technologies, DFS Namespaces and DFS Replication, that you can use (together or independently) to provide fault-tolerant and flexible file sharing and replication services.
DFS Namespaces lets you group shared folders on different servers (and in multiple sites) into one or more logically structured namespaces.
Users view each namespace as a single shared folder with a series of subfolders.
The underlying shared folders structure is hidden from users, and this structure provides fault tolerance and the ability to automatically connect users to local shared folders, when available, instead of routing them over wide area network (WAN) connections.
DFS Replication provides a multimaster replication engine that lets you synchronize folders on multiple servers across local or WAN connections.
It uses the Remote Differential Compression (RDC) protocol to update only those files that have changed since the last replication.
You can use DFS Replication in conjunction with DFS Namespaces or by itself.
This lesson summarizes DFS only very briefly as part of your planning considerations.
Lesson 2 of this chapter discusses the topic in much more depth.
Exam TipPrevious Windows Server examinations have contained a high proportion of DFS questions. There is no reason to believe 70-646 will be any different.
You can also use Share And Storage Management to view and modify the properties of a shared folder or volume, including the local NTFS permissions and the network access permissions for that shared resource. To do this you again select the shared resource on the Shares tab and select Properties in the Actions pane.
Figure 6-6 shows the Properties dialog box for the share folder Public.
The Permissions tab lets you specify share and NTFS permissions.
Clicking Advanced lets you configure user limits and caching and disable or enable access-based enumeration (ABE). ABE is enabled by default and lets you hide files and folders from users who do not have access to them.

QUESTION 30
Your network is configured as shown in the following diagram.
Each office contains a server that has the File Services server role installed.
The servers have a shared folder named Resources.
You need to plan the data availability of the Resources folder.
Your plan must meet the following requirements:
- If a WAN link fails, the files in the Resources folder must be available in all of the offices.
- If a single server fails, the files in the Resources folder must be available in each of the branch offices, and the users must be able to use existing drive mappings.
- Your plan must minimize network traffic over the WAN links.
What should you include in your plan?

A.    a standalone DFS namespace that uses DFS Replication in a full mesh topology
B.    a domainbased DFS namespace that uses DFS Replication in a full mesh topology
C.    a standalone DFS namespace that uses DFS Replication in a hub and spoke topology
D.    a domainbased DFS namespace that uses DFS Replication in a hub and spoke topology

Answer: D
Explanation:
MCITP Self-Paced Training Kit Exam 70-646 Windows Server Administration:
Distributed File System (DFS) DFS is considerably enhanced in Windows Server 2008.
It consists of two technologies, DFS Namespaces and DFS Replication, that you can use (together or independently) to provide fault-tolerant and flexible file sharing and replication services.
DFS Namespaces lets you group shared folders on different servers (and in multiple sites) into one or more logically structured namespaces. Users view each namespace as a single shared folder with a series of subfolders. The underlying shared folders structure is hidden from users, and this structure provides fault tolerance and the ability to automatically connect users to local shared folders, when available, instead of routing them over wide area network (WAN) connections.
DFS Replication provides a multimaster replication engine that lets you synchronize folders on multiple servers across local or WAN connections. It uses the Remote Differential Compression (RDC) protocol to update only those files that have changed since the last replication.
You can use DFS Replication in conjunction with DFS Namespaces or by itself.
Specifying the Replication Topology
The replication topology defines the logical connections that DFSR uses to replicate files among servers. When choosing or changing a topology, remember that that two one-way connections are created between the members you choose, thus allowing data to flow in both directions.
To create or change a replication topology in the DFS Management console, right-click the replication group for which you want to define a new topology and then click New Topology.
The New Topology Wizard lets you choose one of the following options:
Hub And Spoke This topology requires three or more members. For each spoke member, you should choose a required hub member and an optional second hub member for redundancy.
This optional hub ensures that a spoke member can still replicate if one of the hub members is unavailable. If you specify more than one hub member, the hub members will have a full-mesh topology between them.
Full Mesh In this topology, every member replicates with all the other members of the replication group. This topology works well when 10 or fewer members are in the replication group.

FREE DOWNLOAD: NEW UPDATED 70-646 PDF Dumps & 70-646 VCE Dumps from Braindump2go: http://www.braindump2go.com/70-646.html (283 Q&As)

1. http://www.petri.co.il/working_with_group_policy.h tm
2. http://technet.microsoft.com/en-us/library/bb74237 6.aspx
3. http://technet.microsoft.com/en-us/library/ee39095 8.aspx
4. http://www.petri.co.il/working_with_group_policy.h tm
5. http://support.microsoft.com/kb/816102
6. http://technet.microsoft.com/en-us/library/bb68065 1.aspx
7. http://www.plusconsulting.com/WhitePapers/SharePoi nt%202010%20Business%20Value%20WhitePaper.pdf