70-297 Designing a Microsoft Windows Server 2003 Active Directory and Network Infrastructure Practice Exam

Demo Question 1.

IT Training Institute, Scenario Background IT Training Institute is a fairly new educational institution that specializes in providing information technology (IT) training to government employees and school teachers. The company has recently created a web site to provide educational material online for its registered students. Physical Location IT Training Institute has single office that supports 120 users. The office is located in London. Planned Changes IT Training Institute will open a branch office in Birmingham in the next two months. The Birmingham office will support 120 users when it opens. The company will also hire an additional 100 users for the London office. IT Training Institute anticipates a 60% growth in users over the next five years. The company wants to create two distinct networks: an internal network and an external network. The two networks will be managed by two different groups of IT personnel and will be independent of each other. The proposed network infrastructure is shown in the Network Diagram exhibit. Business Processes IT Training Institute students access online course material for the various courses offered by the company. The online course material has been prepared by IT consultants who have access to all online course material. Infrastructure Directory Services When IT Training Institute was established, an unplanned Windows 2000 network was created. The network consists of a single Windows 2000 Active Directory native-mode domain with an internal DNS namespace of itti.com and the NetBIOS name of ITTI. When the public Web site was added, the company discovered that the domain name itti.com was already registered to a company in Florida, US

A. The company then registered the domain name ittraining.com for its Web site. Network Infrastructure The current IT Training Institute network contains two domain controllers named IT-DC01 and IT-DC02, and a single file server named IT-SR03. All servers on the IT Training network run Windows 2000 Server and all client computers run either Windows 2000 Professional or Windows XP Professional. The company has a 10-Mbps Internet connection that is under utilized at present. Problem Statements Chief Executive Officer "Last year we hurriedly put the network together but as the company has grown, network problems have emerged. I want the network to be completely redesigned as a Windows Server 2003 Active Directory environment. This means all our existing user accounts must be migrated from the current environment to Windows Server 2003. Network stability and scalability is crucial to the projected growth of the company. I'm prepared to make the necessary investment in network infrastructure to ensure stability and scalability." Chief Information Officer "We want to implement two distinct networks and we want separate IT staff to manage each network. Internal users must have access to the internal and external networks using a single set of credentials but external users must not be able to access internal resources." "We have to keep the domain name ittraining.com for our external network. We don't want to use more domain names and we want keep our domains separate." "We want to implement a domain based DFS system for the internal network. We will implement DFS servers in the new office as well. Users in each office should automatically be redirected to the DFS server in their current physical location. In the event of a single DFS server failure, users should be automatically redirected to an available DFS server." External Network Administrator "All external users who require access to resources must have a username and password and must submit requests using HTTPS." "External users will only require access to a Web server named IT-SR07. IT-SR07 will provide a web interface to the external users and will retrieve resources from our other external servers." "IT-SR07 will also host the interface for our public web site. Anonymous access will be provided for the public web site." Internal Network Administrator "Some of our employees need to access internal data while traveling. They will connect to the internal network through VPN access. A VPN server named IT-SR05 will be installed on the internal network for this purpose." "We also need to ensure that internal users have access to resources in the existing domain during the migration process and we need to implement fault-tolerance for the internal network." "Replication for our DFS servers must not interfere with normal business operations and should occur only after business hours. "Over the next few months, many new users will be added to the network. We need to provide a consistent environment for these users; therefore, replication of internal user accounts between the London and Birmingham offices must occur within a maximum time delay of one hour." "We must also minimize the impact that name resolution of Internet based resources might have on WAN links. We need to identify a solution that will allow name resolution to occur without generating excessive and unnecessary traffic." "One of the domain controllers at each office will be configured as a DNS server. Each office will also have a single DHCP server. All users accessing the internal network must receive their IP configurations from one of these DHCP servers." Security Administrator "We need to maintain the security of both the internal network and the external network. We should only allow traffic that is required by the company to pass through the internal firewall; all other traffic must be blocked." "We also need to secure the internal and external DNS structures to prevent unauthorized systems from registering their names with DNS. DNS will be installed on a domain controller named IT-DC03 on the external network and will perform name resolution only for the namespace ittraining.com. It must not resolve any other name for external users, including names of other Internet based hosts." Topic 3, IT Training Institute (15 Questions) You need to identify the features that will be available immediately after you migrate the domain to Windows Server 2003. Which feature or features will be available? Global group nesting.
B. Domain local group nesting.
C. Universal security groups.
D. SID history attributes.
E. All of the above.


Display Answer

Answer: E They all will be available.

Explanation: