Learn About Windows Server 2008, Enterprise Administrator

  By Certification Magazine —

Answer:
B

Tutorial:
You should install a Server Core installation, install AD DS and add the Global Catalog server role. A Server Core installation uses fewer resources than a full installation because it does not include user-interface components or unnecessary services. You need to install AD DS and the Global Catalog server role because they are required by Exchange Server. The Wide Area Network (WAN) link is not always available, so Exchange needs to be able to contact a local Global Catalog server.

You should not install an RODC and add the Global Catalog server role. Exchange Server requires a computer running AD DS on the network. It cannot function if only an RODC is available.

You should not enable universal group membership caching. Universal group membership caching is only recommended for offices that have fewer than 100 users. Also, Exchange needs to be able to access a Global Catalog server.

Reference:
Planning Global Catalog Server Placement
Windows Server 2008 Technical Library
http://technet2.microsoft.com/windowsserver2008/en/library/d59c8afc-9781-442e-8421-ee549a6966651033.mspx?mfr=true

Objective: Design support Identity and Access Management components.
Sub-objective: Design the branch office deployment.

Single answer, multiple-choice
Your network is configured as a single Active Directory domain with one site. The domain is operating at the Windows Server 2008 functional level.

You are planning to add the first domain controller at a warehouse location. The domain controller will also function as a Domain Name System (DNS) and Dynamic Host Configuration Protocol (DHCP) server. Users at the warehouse will log on to the existing domain.

The warehouse does not have a physically secure place to store the domain controller. It will be stored under the manager's desk. No IT personnel work at the warehouse and all administration will be performed using remote administration tools. You need to determine the most secure configuration for the server. What should you do?

A.    Install a Server Core installation of Windows Server 2008 and enable the Read-only domain controller (RODC) role.
B.    Install a Server Core installation of Windows Server 2008 and enable the Active Directory Domain Services (AD DS) role.
C.    Install a full installation of Windows Server 2008 and enable the Read-only domain controller (RODC) role.
D.    Install a full installation of Windows Server 2008 and enable the Active Directory Lightweight Directory Services (AD LDS) role.

Answer:
A

Tutorial:
You should install a Server Core installation of Windows Server 2008 and enable the RODC role. A Server Core installation does not include a graphical user interface (GUI). Therefore, the attack surface is smaller because even if a user logs on, he or she will not be able to use GUI tools to make changes. An RODC also provides better security because changes to Active Directory objects cannot be made on that server.

You should not install a Server Core installation of Windows Server 2008 and enable the AD DS role. The AD DS role is the domain services role that allows an administrator to create, modify and delete domain objects. Since there is no administrator at the location, there is no need to allow modifications to Active Directory.

You should not install a full installation of Windows Server 2008. A full installation of Windows Server 2008 has a larger attack surface because a user who logs on interactively can attempt to make modifications using GUI tools.

You should not enable the AD LDS role. The AD LDS role is used to provide a directory that is independent of Active Directory for directory-aware applications.

References:
AD DS: Read-Only Domain Controllers
Windows Server 2008 Technical Library
http://technet2.microsoft.com/windowsserver2008/en/library/ce82863f-9303-444f-9bb3-ecaf649bd3dd1033.mspx

Server Core Installation Option
Windows Server 2008 Technical Library
http://technet2.microsoft.com/windowsserver2008/en/library/78d9d3e1-5ecb-4a01-8fe1-5fcf69e26fee1033.mspx?mfr=true

Objective: Designing for business continuity and data availability.
Sub-objective: Plan for business continuity.

Single answer, multiple-choice

Your company has four locations: St. Louis, Kansas City, New York and Boston. The company uses a Microsoft Office SharePoint Services (MOSS) site to allow employees to collaborate on various projects. The Web server hosting the MOSS site is located in St. Louis.

You are designing a business continuity plan. Your plan must meet the following requirements:

* The MOSS site must be available if up to three servers fail.
* The load for the MOSS site should be distributed between all MOSS servers.
* The MOSS site must be available if a regional natural disaster occurs.

What would you recommend?

A.    Create a failover cluster with a server at each site. Use the Node and File Share Majority quorum model.
B.    Create a failover cluster with a server at each site. Use the Node Majority quorum model.
C.    Create a SharePoint farm with a server at each site. Use Hyper-V.
D.    Create a SharePoint farm with a server at each site. Use Network Load Balancing (NLB).

Answer:
D

Tutorial:
You should create a SharePoint farm with a server at each site and use Network Load Balancing (NLB). MOSS is a Web-based application. You can create a SharePoint farm that contains multiple MOSS servers and use a load-balancing mechanism, such as NLB, to balance the load between them. Doing so ensures the load is distributed between all MOSS servers. If any server fails, the load will be distributed between the remaining servers.

You should not create a failover cluster with a server at each site and use the Node and File Share Majority quorum model. A failover cluster provides automatic failover, which meets the availability requirement. However, a failover cluster does not balance the load between all servers. Only one node in a cluster can act as an active node for a specific application. The active nodes service requests. The passive nodes function as a hot standby. Quorum is used to determine whether the cluster can continue functioning. With quorum, each node and the witness (if there is one) get a vote. If a majority of votes are tallied, the cluster (or the set of nodes in a cluster if there are multiple sets) continues to operate. In a multisite configuration, you should use a file-share witness. You can locate that witness at the same location as a node, but for better protection, you should locate it at a different location.

You should not create a failover cluster with a server at each site and use the Node Majority quorum model. The Node Majority quorum model does not use a witness. Instead, it considers the cluster functional if any node is available.

You should not create a SharePoint farm with a server at each site and use Hyper-V. Hyper-V is a virtualization technology. It is not used to provide availability or load balancing for Web applications.