70-219 Designing a Microsoft Windows 2000 Directory Services Infrastructure Practice Exams

Demo Question 2.

Tailspin Toys Background Tailspin Toys is a medium-sized manufacturer of corporate marketing product. The company designs and manufactures products such as glasses, clothing, and hats that are customized with a company name or logo. The company specializes in manufacturing unusual items for large companies. Tailspin Toys plans to acquire Wide World Importers, one of its clothing suppliers. Wide World Importers is located in Atlanta. The supplier is well known and has an Internet presence on its own domain. Wide World Importers will operate independently of Tailspin Toys Existing Environment The headquarters for Tailspin Toys are located in Detroit. There are two separate company locations in Detroit. One location contains the IT center and the other location contains the headquarters office. The IT center has 100 employees, and the headquarters offices have 2,000 employees. The company employs 20,000 people in nine manufacturing facilities in the United States, two facilities in Europe. Of these 20,000 employees, 15,000 use computers. The company operations are located in the following regions: East (3,000 users) • Boston-regional headquarters • New York • Pittsburgh Midwest (3,000 users) • Chicago-regional headquarters • Cincinnati • Cleveland West (5,000 users) • San Diego-regional headquarters • Las Vegas • San Francisco Canada (1,000 users) • Toronto-regional headquarters • Montreal Europe (2,000 users) • Frankfurt-regional headquarters • Berlin Mexico (1,000 users) • Mexico city Tailspin Toys conducts training in Cleveland for all its employees and for employees of Wide World Importers. During training, employees need access to their local sales and manufacturing information. Offices that connect to the IT center in Detroit are shown in the network diagram. Click the exhibit button and then click the Network Diagram tab. In addition to the offices and connections shown in the network diagram, the following offices have 128-Kbps connections: • Pittsburgh to Boston • New York to Boston • Cincinnati to Chicago • Cleveland to Chicago • Berlin to Frankfurt • San Francisco to San Diego • Las Vegas to San Diego • Montreal to Toronto Bandwidth usage on the connections between the IT center and headquarters and between the IT center and San Diego is approximately 50 percent on each connection. Bandwidth usage on the connection between San Diego and San Francisco is approximately 50 percent. All desktop client computers run Windows NT workstation 4.0. The portable computers run either Windows 95 or Windows 98. There are three Windows NT 4.0 domains, which are named SPINNA, SPINEU, and SPINENG. Company computers in all locations in North America are in SPINN

A. Company computers in Frankfurt and Berlin are in SPINEU. There is a two-way trust between SPINNA and SPINEU. All locations use Windows NT server 4.0 for DHCP, WINS, and DNS. The DNS server in the IT center currently acts as the primary name server for all existing zones of Tailspin Toys. This DNS server resides on a BDC for the SPINNA domain. The BDC is located in the IT center. Each company office except those in Europe have a domain controller for the SPINNA domain and a separate application server. The European offices have domain controllers for only the SPINEU domain. The engineering department is in Mexico City. Because of security concerns, users in the engineering department have their own domain. This domain is named SPINENG. The engineering department administers all user accounts and resources for its domain. SPINNA trusts the SPINENG domain. There is a technical support staff at each regional headquarters. In addition, there are local administrators at all locations. Local administrators perform local network and account administration. The IT center in Detroit provides technical support to the manufacturing facility in Mexico City. Business Requirements Chief Information Office (CIO) Interview The Montreal office will be permanently closed in the near future. Many other users from the Montreal office will be transferred to Toronto. Although the Montreal office is scheduled to close during the Windows 2000 upgrade, it might not close until after the upgrade is complete. Sales personnel in all regions need access to the resources located in the manufacturing facilities in all regions. There are too many technical support personnel who have administrative rights to the domains. I want to decrease technical support at the IT center in Detroit. I also want to have a common naming standard that will accommodate future growth plans. Technical Requirements All client computers will be upgraded to Windows 2000 Professional. Before the Windows 2000 implementation the 128-Kbps connection between the IT center and Frankfurt will be replaced by a 1544-Mbps line. There are no plans to upgrade the 128-Kbps connection between the IT center and Toronto or between the IT center and Mexico City. Wide World Importers will be connected to the Tailspin Toys IT center by a 256-Kbps line. Tailspin Toys wants every user to be able to log on to a local computer and access local network resources even if a WAN connection is lost. Tailspin Toys wants to continue using the existing security policies for Europe and North America. Domain administration for Tailspin Toys will be centralized in two technical support centers. One center will be located in the IT center in Detroit and a second center will be located in Frankfurt. The technical support staff at each regional headquarters will continue to be responsible for basic tasks. Support for Europe that takes place after European business hours will be performed by the North America support center. Each support center will also be responsible for granting the staff at each regional headquarters access to resources as needed. The engineering domain will be consolidated into the na.tailspintoy.com domain to provide better uptime. The users and resource in the engineering department will be integrated into Active Directory as normal users and resources. The engineering department has user needs and practices that are different from those of other departments. Therefore, the engineering department needs to retain the ability to administer its own user accounts and resources. A software development company is creating human resource software for Tailspin Toys. The software will be integrated with Active Directory. This software will add additional attributes to user objects. Wide World Importers is also developing similar software. Both software solutions will be implemented independently. In addition, Wide World Importers has 20 inventory and distribution applications that need to be used by Tailspin Toys employees. Tailspin Toys has registered tailspintoys.com domain name. Wide World Importers has registered the wideworldimporters.com domain name. Group Policy can vary among regions and locations. Technical support staff in each region needs to be able to change policies at each location, but all will share some common settings. CIO Interview To reduce replication traffic on the connection between Frankfurt and the IT center, I want one domain for North America and a different domain for Europe. To keep Wide World Importers administratively separate from Tailspin Toys, we need to put them in separate Active Directory forests. (The Active Directory forest diagram is displayed in the exhibit. Click the exhibit button and then the Active Directory Forest tab) I want every employee to have a smart card that must be used for all interactive logon authentications. I also want to take advantage of the added security of Active Directory integrated DNS zones where possible. However, I want to keep the DNS structure as simple as possible Case Study #2, Tailspin Toys (12 Questions) You need to decide which domain controller to upgrade first. Which factor has the most influence on your decision? The empty root domain strategy used by the new forest for Tailspin Toys
B. The planned upgrade of the WAN connection between the IT center and Frankfurt
C. The current DNS server placements
D. The statement by the CIO that there will be two forests; one for Tailspin Toys and one for Wide World Importers


Display Answer

Answer: B

Explanation: Well, the first Domain Controller to be upgraded has to be a PDC, because we are talking domain controller upgrade. We have three domains for Tailspin Toys, and we will end up with three active directory domains. One of those domains will be the empty root, and then we will upgrade SPINNA and SPINEU and eliminate SPINENG. So, the question comes down to which PDC to do first, SPINNA or SPINEU? When we look at the size of the domains (in terms of users), we have 2,000 users in the SPINEU domain, and over 15,000 users in the SPINNA domain, which includes the users in headquarters. When choosing account domains to convert, it is usually advisable to convert a smaller domain first. There are many reasons for this, but basically if something goes Incorrect, the smallest amount of users will be affected. Conversion, and recovery from failure will be smaller since the user account database will be smaller (with less users). The empty root domain will need to be created first, and it will reside at IT headquarters. It will, by default, have a global catalog. When the first SPINEU domain controller is upgraded, it can ALSO be made a Global Catalog Server. So, although we upgrade SPINEU first, it will actually be the 2nd domain in the forest. As a result, we have now added traffic - cross domain replication traffic of Active Directory. Even though we can control the intervals of replication, and replication is compressed between sites, this is still additional traffic that is being imposed across the link. Since IT headquarters will provide help desk support after hours, more bandwidth may be required as service calls initially increase due to the newness of the system and the changes. Finally, since Active Directory heavily relies on DNS, with the DNS servers located at IT headquarters, there can be an expected increase in traffic for DNS resolution. Incorrect