Pro:Windows Server 2008, Enterprise Administrator : 70-647 Exam
Product DescriptionExam Number/Code: 70-647
Exam Name:Pro:Windows Server 2008, Enterprise Administrator

“Pro:Windows Server 2008, Enterprise Administrator”, also known as 70-647 exam, is a Microsoft certification. With the complete collection of questions and answers, Pass4sure has assembled to take you through 172 Q&As to your 70-647 Exam preparation. In the 70-647 exam resources, you will cover every field and category in MCITP helping to ready you for your successful Microsoft Certification.
Exam news
This Microsoft Certified Professional (PRO) exam, Exam 70-647: PRO: Windows Server 2008, Enterprise Administrator, became available in April 2008. This exam is available in English, Chinese (Simplified), Chinese (Traditional), French, German, Italian, Japanese, Korean, Portuguese (Brazil), Russian, and Spanish.

Audience profile
The enterprise administrator is responsible for the overall IT environment and architecture. The enterprise administrator translates business goals into technology decisions and designs mid-range to long-term strategies. Enterprise administrators also make key decisions and recommendations about the following:

• Network infrastructure

• Directory services, identity management, and authentication

• Security policies

• Business continuity (disaster recovery, personnel, equipment, and data)

• Design of IT administrative structure (delegation models)

• Best practices, standards, and service level agreements (SLAs)

The enterprise administrator is responsible for infrastructure design and global configuration changes. The enterprise administrator’s job role involves 20 percent operations, 60 percent engineering, and 20 percent support tasks.

Credit toward certification
When you pass Exam 70-647: PRO: Windows Server 2008, Enterprise Administrator, you earn credit toward the following certification:

• Microsoft Certified IT Professional (MCITP): Enterprise Administrator

Preparation tools and resources
To help you prepare for this exam, Microsoft Learning recommends that you have hands-on experience with the product and that you use the following training resources. These training resources do not necessarily cover all of the topics listed in the “Skills measured” section.

Instructor-led training Microsoft E-Learning Microsoft Press products Practice tests
Course 6435: Designing a Windows Server 2008 Network Infrastructure (five days)

Course 6436: Designing a Windows Server 2008 Active Directory Infrastructure and Services (five days)

Course 6437: Designing a Windows Server 2008 Application Infrastructure (three days)
Collection 6435: Designing a Windows Server 2008 Network Infrastructure (14 hours)

Collection 6436: Designing a Windows Server 2008 Active Directory Infrastructure and Services (16 hours)

Collection 6437: Designing a Windows Server 2008 Application Infrastructure (10 hours) (available soon)
MCITP Self-Paced Training Kit (Exams 70-640, 70-642, 70-643, 70-647): Windows Server 2008 Enterprise Administrator Core Requirements
Save 20 percent with MeasureUp (Measureup.com)

Self Test Software (Selftestsoftware.com)

Microsoft online resources
• Windows Server 2008 – Learning Portal: Find special offers and information on training and certification.

• Product information: Visit the Windows Server 2008 Web site for detailed product information.

• TechNet: Designed for IT professionals, this site includes how-to instructions, best practices, downloads, technical resources, newsgroups, and chats.

• MSDN: Designed for developers, the Microsoft Developer Network (MSDN) features code samples, technical articles, downloads, newsgroups, and chats.

• Microsoft Learning Community: Join newsgroups and visit community forums to connect with your peers for suggestions on training resources and advice on your certification path and studies.

Skills measured
This exam measures your ability to accomplish the technical tasks listed in the following table. The percentages indicate the relative weight of each major topic area on the exam.

Skills measured by Exam 70-647
Planning network and application services (23 percent)
Plan for name resolution and IP addressing.

May include but is not limited to: internal and external naming strategy, naming resolution support for legacy clients, naming resolution for directory services, IP addressing scheme, TCP/IP version coexistence

Design for network access.

May include but is not limited to: network access policies, remote access strategy, perimeter networks, server and domain isolation

Plan for application delivery.

May include but is not limited to: application virtualization, presentation virtualization, locally installed software, Web-based applications

Plan for Terminal Services.

May include but is not limited to: Terminal Services licensing, Terminal Services infrastructure

Designing core identity and access management components (25 percent)
Design Active Directory forests and domains.

May include but is not limited to: forest structure, forest and domain functional levels, intra-organizational authorization and authentication, schema modifications

Design the Active Directory physical topology.

May include but is not limited to: placement of servers, site and replication topology, printer location policies

Design the Active Directory administrative model.

May include but is not limited to: delegation, group strategy, compliance auditing, group administration, organizational structure

Design the enterprise-level group policy strategy.

May include but is not limited to: group policy hierarchy and scope filtering, control device installation, authentication and authorization

Designing support identity and access management components (29 percent)
Plan for domain or forest migration, upgrade, and restructuring.

May include but is not limited to: cross-forest authentication, backward compatibility, object migration, migration planning, implementation planning, environment preparation

Design the branch office deployment.

May include but is not limited to: authentication strategy, server security

Design and implement public key infrastructure.

May include but is not limited to: certificate services, PKI operations and maintenance, certificate life cycle management

Plan for interoperability.

May include but is not limited to: inter-organizational authorization and authentication, application authentication interoperability, cross-platform interoperability

Designing for business continuity and data availability (23 percent)
Plan for business continuity.

May include but is not limited to: service availability, directory service recovery

Design for software updates and compliance management.

May include but is not limited to: patch management and patch management compliance, Microsoft Update and Windows Update, security baselines, system health models

Design the operating system virtualization strategy.

May include but is not limited to: server consolidation, application compatibility, virtualization management, placement of servers

Design for data management and data access.

May include but is not limited to: data security, data accessibility and redundancy, data collaboration

Question: 1
Your network consists of one Active Directory forest named contoso.com. The functional level of the contoso.com forest is Windows Server 2008.
The network contains seven servers that run Internet Information Services (IIS) 7.0 and host Web services. Remote users from a partner company access the Web services through HTTPS. The
partner company has a separate Active Directory forest named fabrikam.com. The functional
level of the fabrikam.com forest is Windows Server 2003.
You need to recommend an authentication solution for the fabrikam.com users. The solution must meet the following requirements:
All communications between both forests must use only HTTPS.
Remote users must only authenticate once to access all Web services.
Users from fabrikam.com must access the Web services by using user accounts in the fabrikam.com forest.
What should you recommend?

Free PassGuide Practice Engine Demo Download Pass4sure offers free demos for each certification exam, including all IT vendors. You can check out the testing engine software, or pdf file question quality and usability of our practice exams before you decide to buy it. We are the only one site that offers demos for almost all IT certification exams.If you want to try p4s exam practice engine demo. http://demo.passguide.com/download

A. Implement Client Certificate Mapping Authentication on the IIS servers.
B. Implement Microsoft Identity Lifecycle Manager (ILM) 2007 on the contoso.com forest.
C. Implement a forest trust between the contoso.com and the fabrikam.com forests. Configure the forest trust to use Selective Authentication.
D. Implement Active Directory Federation Services (AD FS) in the contoso.com forest. Create a federation trust between the contoso.com forest and the fabrikam.com forest.
Answer: D Question: 2
Your network consists of one Active Directory domain named contoso.com.
The domain contains three Windows Server 2008 servers named Server1, Server2, and Server3. Server1 runs Active Directory Certificate Services (AD CS) and is configured as an enterprise
root certification authority. Server2 hosts an internal Web site. Users currently connect to the Web site by using the URL

https://server2.contoso.com.

You plan to replicate the Web site from Server2 to Server3.
You need to recommend a solution to enable users to connect to the Web site through HTTPS on either Server2 or Server3 by using a single URL. The solution must meet the following requirements:
Users must be able to use the https://www.contoso.com URL to connect to the Web site. Incoming connections must be dynamically balanced between Server2 and Server3.
What should you recommend?

A. Add both servers to a Network Load Balancing cluster. Export the Web server certificate on
Server2 to Server3.
B. Add both servers to a failover cluster. Issue a Web server certificate for www.contoso.com. Install the certificate on Server2.
C. Add both servers to a Network Load Balancing cluster. Issue a Web server certificate for www.contoso.com. Install the certificate on Server2 and Server3.
D. Add both servers to a failover cluster. Issue a Web server certificate for server2.contoso.com
and install the certificate on Server2. Issue a Web server certificate for server3.contoso.com and install the certificate on Server3.
Answer: C Question: 3
Your company has a main office and 10 branch offices.

Page 1 of 52

Exam Name: Pro: Windows Server 2008, Enterprise Administrator
Exam Type: Microsoft
Exam Code: 70-647 Total Questions: 121

The network consists of one Active Directory domain. All domain controllers run Windows Server
2008 and are located in the main office. You need to plan the deployment of one Windows Server
2008 domain controller in each branch office.
The solution must meet the following requirements:
Branch office domain controllers must be able to log users on to the domain.
Branch office domain controllers must be able to store the passwords of only some domain users. Users must be able to download Group Policy objects (GPOs) from the branch office domain controllers. What should your plan include?

A. Install Active Directory Lightweight Directory Services (AD LDS).
B. Install Active Directory Domain Services (AD DS) on a Server Core installation of Windows
Server 2008.
C. Install Active Directory Domain Services (AD DS). Select the read-only domain controller
(RODC) option during installation.
D. Install Active Directory Domain Services (AD DS). Create a new Password Settings object
(PSO). Link the PSO to user objects in the respective branch office.
Answer: C Question: 4
Your company has a main office and 100 branch offices. The network consists of one Active
Directory domain that contains 10,000 users. You plan to deploy one Windows Server 2008 domain controller in each branch office. You need to recommend a solution to minimize network traffic during the installation of Active Directory Domain Services (AD DS) on each branch office domain controller. What should you recommend?

A. Install AD DS by using the Install from Media feature.
B. Install AD DS and configure the read-only domain controller (RODC) option.
C. Install a Server Core installation of Windows Server 2008, and then install AD DS.
D. Disable the Global Catalog option on each branch office domain controller. Enable Universal
Group Membership Caching from each branch office site.
Answer: A Question: 5
Your network consists of one Active Directory domain that contains only domain controllers that run Windows Server 2003. Your company acquires another company. You need to provide user
accounts for the employees of the newly acquired company. The solution must support multiple account lockout policies. What should you do?

A. Implement Authorization Manager.
B. Implement Active Directory Federation Services (AD FS).
C. Upgrade one domain controller to Windows Server 2008. Raise the functional level of the domain to Windows Server 2003.
D. Upgrade all domain controllers to Windows Server 2008. Raise the functional level of the domain to Windows Server 2008.
Answer: D Question: 6
Your company has a main office and a branch office.
Your network consists of one Active Directory domain. All domain controllers run Windows Server
2008.
You need to plan the installation of a new server as a read-only domain controller (RODC) in the branch office. The plan must meet the following requirements:

Page 2 of 52

Exam Name: Pro: Windows Server 2008, Enterprise Administrator
Exam Type: Microsoft
Exam Code: 70-647 Total Questions: 121

A branch office user must complete the RODC installation.
The branch office user must only be a member of only the Domain Users security group. What should you do first?

A. Create an installation media by using ntdsutil.
B. Instruct the user to join the new server to the domain.
C. Pre-create a read-only domain controller (RODC) account for the branch office server.
D. Create an organizational unit (OU) for the branch office. Delegate full control of the OU to the branch office user.
Answer: C Question: 7
Your network contains one Active Directory forest that has a root domain and three child
domains. All domain controllers run Windows Server 2003 Service Pack 1 (SP1). Each domain has a different password policy.
The domain is configured as shown in the exhibit. (Click the Exhibit button.) You plan to reduce the number of domains in the forest.
You need to plan the restructuring of the forest to meet the following requirements: Maintain all existing password policies.
Maintain all existing user account attributes. What should you include in your plan?

A. Upgrade all domains to Windows Server 2008. Redirect the users container in the root domain by using the redirusr.exe tool, and then remove the child domains. Enable fine- grained password policies.
B. Upgrade all domains to Windows Server 2008 and enable SID history. Move all user
accounts from the child domains to the root domain by using the movetree.exe tool, and then remove the child domains.

pass4sure 70-647

Questions and Answers : 172 Q&As Updated: October 1st , 2008 Price: $125.99 $99.99

Free download:pass4sure microsoft mcitp 70-647 v2.93
Free download:testking microsoft mcitp 70-647 v2.93

PassGuide provides high-quality test materials, for example, Cisco CCNA CCNP CCIE, Comptia A + NETWORK + Security +, Juniper jncia, jncis, Vmware VCP-410,certification practice exams and so on.We are committed to give full refund to candidates if they fail the exam with use of our products.And we are confident to make such a guarantee. Buy Best Practice Exam,high-quality ,100% Guarantee ,Pls contact me,Mail:Sales@passguide.com

P4S Free Downloads

Type	Exam Braindumps	New Questions & Answers	Latest Updated	Available link
	All Pass4sure's Exam Pack	858	1 days ago	Download Free Testing Engines

PassGuide Braindumps-Free Test king Help You Quick Pass Any it Certifications Exams

Click links: www.testking.la/braindumps/free/down/crack/all/testking