Your network consists of a single IP subnet. All servers and client computers connect to managed switches. All servers run Windows Server 2008 R2. All client computers run Windows 7.
The servers on the network are configured as shown in the following table. (Click the Exhibit)

You need to prepare the Network Access Protection (NAP) environment to meet the following requirements:
-Computers that have the required Microsoft updates installed must be able to access all computers on the network.
-Network switches must first allow client computers to communicate to only Server1 and Server2 when the computers connect to the network.
Which NAP enforcement method should you use?

• A. IPsec
• B. 802.1 x
• C. VPN
• D. DHCP

Your network consists of one Active Directory domain and one IP subnet. All servers run Windows Server 2008. All client computers run Windows Vista, Windows XP Professional, and Windows 2000 Professional. The servers are configured as shown in the following table. (Click the Exhibit)
Server2 is configured to support Network Access Protection (NAP) by using IPsec, DHCP, and 802.1 x enforcement methods.
Users from a partner company have computers that are not joined to the domain. The computers successfully connect to the network.
You need to ensure that only computers that are joined to the domain can access network resources on the domain.
What should you do?

• A. Configure all DHCP scopes on Server1 to enable NAP.
• B. Configure all network switches to require 802.1 x authentication.
• C. Create a Group Policy object (GPO) and link it to the domain. In the GPO, enable a NAP enforcement client for IPsec communications on all client computers in the domain.
• D. Create a Group Policy object (GPO) and link it to the domain. In the GPO, enable a secure server IPsec policy on all member servers in the domain.

Your company has a main office and 10 branch offices. The network consists of one Active Directory domain. All domain controllers run Windows Server 2008 and are located in the main office. Each branch office contains one member server. Branch office administrators in each branch office are assigned the necessary rights to administer only their member servers. You deploy one read-only domain controller (RODC) in each branch office.
You need to recommend a security solution for the branch office Windows Server 2008 domain controllers.
The solution must meet the following requirements:
-Branch office administrators must be granted rights on their local domain controller only.
-Branch office administrators must be able to administer the domain controller in their branch office. This includes changing device drivers and running Windows updates.
What should you recommend?

• A. Add each branch office administrator to the local Administrators group of their respective domain controller.
• B. Move each branch office domain controller computer object to a new organizational unit (OU). Grant each local administrator Full Control permission on the new OU.
• C. Add each branch office administrator to the Administrators group of the domain.
• D. Grant each branch office administrator Full Control permission on their domain controller computer object in Active Directory.

Your company has two main offices in Denver and Chicago and four branch offices in New York, Miami,
Seattle, and San Francisco.
Each office is configured as an Active Directory site. Site links are configured as shown in the exhibit.
The network consists of one Active Directory forest.
All domain controllers run Windows Server 2003.
Each main office has four domain controllers. Each branch office has one domain controller. The Bridge all
site links option is disabled.
You need to prepare the environment to install a read-only domain controller (RODC) in each branch office. The solution must be achieved by upgrading the minimum number of domain controllers.
What should you do? Exhibit:

• A. Upgrade one domain controller in the Chicago office and one domain controller in the Denver office to Windows Server 2008.
• B. Upgrade one domain controllers in the Chicago office to Windows Server 2008. Create a site link that connects the Seattle and San Francisco office sites to the Chicago office site.
• C. Configure a site link to connect all branch office sites. Upgrade one domain controller in the Denver office to Windows Server 2008.
• D. Configure a site link to connect the Chicago office site and the San Francisco and Seattle office sites. Upgrade one domain controller in the Denver office to Windows Server 2008.

A corporate network includes a server that runs Windows Server 2008 R2.
You plan to deploy a content management system on the server.
You need to recommend a content management system that meets the following requirements:
-Automatically protect documents that are uploaded to a central data store.
-Protect documents by preventing users from printing sensitive corporate data.

• A. Install failover clustering on each Web server.
• B. Install Network Load Balancing on each Web server.
• C. Create managed handler mappings in Internet Information Services (IIS).
• D. Assign multiple bindings in Internet Information Services (IIS).