Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
- Create BookmarkCreate Bookmark
- Create Note or TagCreate Note or Tag
- DownloadDownload
- PrintPrint
Introduction
Introduction
Microsoft's certification program now contains four primary levels of certification: Technology Series, Professional Series, Master Series, and Architect Series. The Technology Series of certifications are intended to allow candidates to target specific technologies and are the basis for obtaining the Professional Series, Master Series, and Architect Series of certifications. The certifications contained within the Technology Series consist of one to three exams and focus on a specific technology rather than job-role skills. When obtaining a Technology Series certification, you are recognized as a Microsoft Certified Technology Specialist (MCTS) on the specific technology or technologies you have been tested on.
By contrast, the Professional Series of certifications focus on a job role and are not necessarily focused on a single technology but rather a comprehensive set of skills for performing the job role being tested. The Professional Series certifications include Microsoft Certified IT Professional (MCITP) and Microsoft Certified Professional Developer (MCPD).
The Masters Series is a series of validations produced by Microsoft to indicate that not only has someone attained a professional-level series of certifications but that they have actively participated in that role for a certain number of years. (The exact number of years varies by topic.) The Masters Series concludes with a multiweek direct-focus training seminar that is designed to ensure that the professionals, by the end of this experience, are truly masters in their field.
The Architect Series of certifications offered by Microsoft are premier certifications that consist of passing a review by a board of previously certified architects. To apply for the Architect Series of certifications, you must have a minimum of 10 years of industry experience. Passing the review board for an Architect Series certification will allow you to become a Microsoft Certified Architect (MCA).
This book has been developed to give you the critical skills and knowledge you need to prepare for the Windows Server 2008 Enterprise Administrator exam (70-647) in the Professional Series of certifications.
The Microsoft Certified Professional Program
Since the inception of its certification program, Microsoft has certified more than 2 million people. As the computer network industry continues to increase in both size and complexity, this number is sure to grow—and the need for proven ability will also increase. Certifications can help companies verify the skills of prospective employees and contractors.
Microsoft has developed its Microsoft Certified Professional (MCP) program to give you credentials that verify your ability to work with Microsoft products effectively and professionally. Several levels of certification are available based on specific suites of exams. Microsoft has recently created a new generation of certification programs:
Microsoft Certified Technology Specialist (MCTS)
The MCTS can be considered the entry-level certification for the new generation of Microsoft certifications. The MCTS certification program targets specific technologies instead of specific job roles. Each MCTS exam is a stand-alone exam; you may need specific ones to earn an MCITP, but one MCTS exam equals one MCTS certification.
Microsoft Certified IT Professional (MCITP)
The MCITP certification is a Professional Series certification that tests network and systems administrators on job roles rather than only on a specific technology. The MCITP generally consists of passing one to three exams, in addition to obtaining an MCTS-level certification. The Windows Server 2008 Enterprise Administrator exam (70-647) that this book covers is one of the exams you must pass to gain MCITP certification.
Microsoft Certified Master
The Microsoft Certified Master certification is a step above the Professional Series certification and is currently offered for Windows Server 2008, SQL Server 2008, and Exchange Server 2007. By the time this book is in print, Office Communication Server and SharePoint Master certifications will be available as well. Qualified MCITPs attend advanced training specific to the certification track, must successfully complete in-class written and lab exams, and then complete a separate qualification lab exam.
Microsoft Certified Professional Developer (MCPD)
The MCPD certification is a Professional Series certification for application developers. Similar to the MCITP, the MCPD is focused on a job role rather than on a single technology. The MCPD generally consists of passing one to three exams, in addition to obtaining an MCTS-level certification.
Microsoft Certified Architect (MCA)
The MCA is Microsoft's premier certification series. Obtaining the MCA certification requires a minimum of 10 years of experience and requires the candidate to pass a review board consisting of peer architects.
How Do You Become Certified as a Windows Server 2008 Enterprise Administrator?
Attaining a Microsoft certification has always been a challenge. In the past, students have been able to acquire detailed exam information—even most of the exam questions—from online "brain dumps" and third-party "cram" books or software products. For the new generation of exams, this is simply not the case.
Microsoft has taken strong steps to protect the security and integrity of its new certification tracks. Now prospective candidates must complete a course of study that develops detailed knowledge about a wide range of topics. It supplies them with the true skills needed, derived from working with the technology being tested.
The new generations of Microsoft certification programs are heavily weighted toward hands-on skills and experience. It is recommended that candidates have troubleshooting skills acquired through hands-on experience and working knowledge.
Fortunately, if you are willing to dedicate the time and effort to learn Windows Server 2008 Active Directory, you can prepare yourself well for the exam by using the proper tools. By working through this book, you can successfully meet the exam requirements to pass the Windows Server 2008 Active Directory exam.
This book is part of a complete series of Microsoft certification study guides, published by Sybex Inc., that together cover the new MCTS and MCITP exams, as well as the core MCSA, MCSE, and MCDST operating system requirements. Please visit the Sybex website at www.sybex.com for complete program and product details.
MCITP Requirements
Candidates for the MCITP: Enterprise Administrator certification on Windows Server 2008 must pass a total of five Windows Server 2008 core exams. The core examinations are Windows Server 2008 Active Directory, Configuring (70-640); Windows Server 2008 Network Infrastructure, Configuring (70-642); and Windows Server 2008 Applications Infrastructure, Configuring (70-643). For the elective, you must take either the Configuring Windows Vista Client (70-620) exam or the Deploying and Maintaining Windows Vista Client and 2007 Microsoft Office System Desktops (70-624) exam. This culminates with the Windows Server 2008 Enterprise Administrator (70-647) exam.
NOTE
For a more detailed description of the Microsoft certification programs, including a list of all the exams, visit the Microsoft Learning website at www.microsoft.com/learning/mcp. As mentioned, for the MCITP: Enterprise Administrator certification, the exams are 70-640, 70-642, 70-643, 70-647, and either 70-620 or 70-624.
The Windows Server 2008 Enterprise Administrator Exam
The Enterprise Administrator exam for Windows Server 2008 covers concepts and skills related to planning, configuring, troubleshooting, and managing Windows Server 2008 servers.
NOTE
Microsoft provides exam objectives to give you a general overview of possible areas of coverage on the Microsoft exams. Keep in mind, however, that exam objectives are subject to change at any time without prior notice and at Microsoft's sole discretion. Please visit the Microsoft Learning website (www.microsoft.com/learning/mcp) for the most current listing of exam objectives.
Types of Exam Questions
In an effort to both refine the testing process and protect the quality of its certifications, Microsoft has focused its newer certification exams on real experience and hands-on proficiency. There is a greater emphasis on your past working environments and responsibilities and less emphasis on how well you can memorize. In fact, Microsoft says that certification candidates should have hands-on experience before attempting to pass any certification exams.
NOTE
Microsoft tries to protect the exams' integrity by regularly adding and removing exam questions, limiting the number of questions that any individual sees in a beta exam, limiting the number of questions delivered to an individual by using adaptive testing, and adding new exam elements.
Exam questions may be in a variety of formats. Depending on which exam you take, you'll see multiple-choice questions, as well as select-and-place and prioritize-a-list questions. Simulations and case study–based formats are included as well. You may also find yourself taking what's called an adaptive format exam. In the following sections, I'll explain the types of exam questions and explain the adaptive testing technique so you'll be prepared for all the possibilities.
|
Multiple-Choice Questions
Multiple-choice questions come in two main forms. One is a straightforward question followed by several possible answers, of which one or more is correct. The other type of multiple-choice question is more complex and based on a specific scenario. The scenario may focus on several areas or objectives.
Select-and-Place Questions
Select-and-place exam questions involve graphical elements that you must manipulate to successfully answer the question. For example, you might see a diagram of a computer network, as shown in the following graphic taken from the select-and-place demo downloaded from Microsoft's website:
A typical diagram will show computers and other components next to boxes that contain the text Place here. The labels for the boxes represent various computer roles on a network, such as a print server and a file server. Based on information given for each computer, you are asked to select each label and place it in the correct box. You need to place all the labels correctly. No credit is given for the question if you correctly label only some of the boxes.
In another select-and-place problem, you might be asked to put a series of steps in order by dragging items from boxes on the left to boxes on the right and placing them in the correct order. Another type requires that you drag an item from the left and place it under an item in a column on the right.
NOTE
For more information on the various exam question types, visit www.microsoft.com/learning/mcpexams/policies/innovations.asp.
Simulations
Simulations are the kinds of questions that most closely represent actual situations and test the skills you use while working with Microsoft software interfaces. These exam questions include a mock interface on which you are asked to perform certain actions according to a given scenario. The simulated interfaces look nearly identical to what you see in the actual product, as shown in this example:
Because of the number of possible errors that can be made on simulations, be sure to consider the following recommendations from Microsoft:
Do not change any simulation settings that don't pertain to the solution directly.
When related information has not been provided, assume that the default settings are used.
Make sure your entries are spelled correctly.
Close all the simulation application windows after completing the set of tasks in the simulation.
The best way to prepare for simulation questions is to spend time working with the graphical interface of the product on which you will be tested.
Case Study–Based Questions
Case study–based questions first appeared in the MCSD program. These questions present a scenario with a range of requirements. Based on the information provided, you answer a series of multiple-choice and select-and-place questions. The interface for case study–based questions has a number of tabs, each of which contains information about the scenario. Currently, this type of question appears only in most of the Design exams.
NOTE
Microsoft will regularly add and remove questions from the exams. This is called item seeding. It is part of the effort to make it more difficult for individuals to merely memorize exam questions that were passed along by previous test-takers.
Tips for Taking the Windows Server 2008 Enterprise Administrator Exam
Here are some general tips for achieving success on your certification exam:
Arrive early at the exam center so you can relax and review your study materials. During this final review, you can look over tables and lists of exam-related information.
Read the questions carefully. Don't be tempted to jump to an early conclusion. Make sure you know exactly what the question is asking.
Answer all questions. If you are unsure about a question, then mark the question for review and return to the question at a later time.
On simulations, do not change settings that are not directly related to the question. Also, assume default settings if the question does not specify or imply which settings are used.
For questions you're not sure about, use a process of elimination to get rid of the obviously incorrect answers first. This improves your odds of selecting the correct answer when you need to make an educated guess.
Don't be surprised by seeing a technology you don't recognize. Part of the job of an Enterprise Administrator is to be familiar with just about everything, but that's a tough nut to crack. Just stick with your gut, and you should do well.
Exam Registration
You can take the Microsoft exams at any of more than 1,000 Authorized Prometric Testing Centers (APTCs) around the world. For the location of a testing center near you, call Prometric at 800-755-EXAM (755-3926). Outside the United States and Canada, contact your local Prometric registration center.
Find out the number of the exam you want to take and then register with the Prometric registration center nearest to you. At this point, you will be asked for advance payment for the exam. The exams are $125 each, and you must take them within one year of payment. You can schedule exams up to six weeks in advance or as late as one working day prior to the date of the exam. You can cancel or reschedule your exam if you contact the center at least two working days prior to the exam. Same-day registration is available in some locations, subject to space availability. Where same-day registration is available, you must register a minimum of two hours before test time.
|
When you schedule the exam, you will be provided with instructions regarding appointment and cancellation procedures, ID requirements, and information about the testing center location. In addition, you will receive a registration and payment confirmation letter from Prometric.
Microsoft requires certification candidates to accept the terms of a nondisclosure agreement before taking certification exams.
Is This Book for You?
If you want to achieve the MCITP: Enterprise Administrator certification and your goal is to prepare for the exam by learning how to use and manage the operating system, this book is for you. You'll find clear explanations of the fundamental concepts you need to grasp and plenty of help to achieve the high level of professional competency you need to succeed in your chosen field.
However, if you just want to attempt to pass the exam without really understanding Windows Server 2008, this study guide is not for you. It is written for people who want to acquire hands-on skills and in-depth knowledge of Windows Server 2008.
What's in the Book?
What makes a Sybex study guide the book of choice for hundreds of thousands of MCPs? Sybex has taken into account not only what you need to know to pass the exam but also what you need to know to take what you've learned and apply it in the real world. Each book contains the following:
Objective-by-objective coverage of the topics you need to know
Each chapter lists the objectives covered in that chapter.
NOTE
The topics covered in this study guide map directly to Microsoft's official exam objectives. Each exam objective is covered completely.
Assessment test
Directly following this introduction is an assessment test that you should take. It is designed to help you determine how much you already know about Windows Server 2008 Active Directory and Windows Server 2008 enterprise environments. Each question is tied to a topic discussed in the book. Using the results of the assessment test, you can figure out the areas where you need to focus your study. Of course, I do recommend you read the entire book.
Exam essentials
To highlight what you learn, you'll find a list of exam essentials at the end of each chapter. The "Exam Essentials" section briefly highlights the topics that need your particular attention as you prepare for the exam.
Glossary
Throughout each chapter, you will be introduced to important terms and concepts that you will need to know for the exam. These terms appear in italic within the chapters, and at the end of the book, a detailed glossary gives definitions for these terms, as well as other general terms you should know.
Review questions, complete with detailed explanations
Each chapter is followed by a set of review questions that test what you learned in the chapter. The questions are written with the exam in mind, meaning that they are designed to have the same look and feel as what you'll see on the exam. Question types are just like the exam, including multiple-choice, and exhibits.
Hands-on exercises
In chapters, you'll find exercises designed to give you the important hands-on experience that is critical for your exam preparation. The exercises support the topics of the chapter, and they walk you through the steps necessary to perform a particular function.
Real-world scenarios
Because reading a book isn't enough for you to learn how to apply these topics in your everyday duties, I have provided real-world scenarios in special sidebars. These explain when and why a particular solution would make sense, in a working environment you'd actually encounter.
Interactive CD
Every Sybex study guide comes with a CD complete with additional questions, flashcards for use with an interactive device, and the book in electronic format. Details are in the following section.
What's on the CD?
This new member of Sybex's best-selling Study Guide series includes quite an array of training resources. The CD offers bonus exams and flashcards to help you study for the exam. It also includes the complete contents of the study guide in electronic form. The CD's resources are described here:
The Sybex e-book for MCITP: Windows Server 2008 Enterprise Administrator Study Guide
Many people like the convenience of being able to carry their whole study guide on a CD. They also like being able to search the text via computer to find specific information quickly and easily. For these reasons, the entire contents of this study guide are supplied on the CD in PDF. We've also included Adobe Acrobat Reader, which provides the interface for the PDF contents as well as the search capabilities.
The Sybex test engine
This is a collection of multiple-choice questions that will help you prepare for your exam. There are four sets of questions:
Two bonus exams designed to simulate the actual live exam.
All the questions from the study guide, presented in a test engine for your review. You can review questions by chapter, or you can take a random test.
The assessment test.
Here is a sample screen from the Sybex test engine:
Sybex flashcards for PCs and handheld devices The "flashcard" style of question offers an effective way to quickly and efficiently test your understanding of the fundamental concepts covered in the exam. The Sybex flashcards set consists of 100 questions presented in a special engine developed specifically for the Study Guide series. Here's what the Sybex flashcards interface looks like:
Because of the high demand for a product that will run on handheld devices, Sybex has also developed, in conjunction with Land-J Technologies, a version of the flashcard questions that you can take with you on your Palm OS handheld device.
Hardware and Software Requirements
You should verify that your computer meets the minimum requirements for installing Windows Server 2008. You can install Windows Server 2008 on a separate system or as a Virtual PC image on an existing operating system. Either way, you need to ensure that your computer or virtual PC environment meets or exceeds the recommended requirements for a more enjoyable experience.
NOTE
You can download a demo copy of Windows Server 2008 from www.microsoft.com/windowsserver2008/en/us/trial-software.aspx.
Contacts and Resources
To find out more about Microsoft education and certification materials and programs, to register with Prometric, or to obtain other useful certification information and additional study resources, check the following resources:
Microsoft Learning home page
This website provides information about the MCP program and exams. You can also order the latest Microsoft Roadmap to Education and Certification.
Microsoft TechNet technical information network
800-344-2121
Use this website or phone number to contact support professionals and system administrators. Outside the United States and Canada, contact your local Microsoft subsidiary for information.
Prometric
800-755-3936
Contact Prometric to register to take an exam at any of more than 800 Prometric Testing Centers around the world.
MCP Magazine online
Microsoft Certified Professional Magazine is a well-respected publication that focuses on Windows certification. This site hosts chats and discussion forums and tracks news related to the MCTS and MCITP program. Some of the services cost a fee, but they are well worth it.
WindowsITPro magazine
You can subscribe to this magazine or read free articles at the website. The study resource provides general information on Windows Vista, Server, and .NET Server.
Assessment Test
If you work in an organization that has all your resources compiled into one location and that needs all personnel to access resources in that, and only that, location, what administrative design should you follow?
Centralized
Decentralized
Hybrid
Complex
Which technology supports single sign-on?
AD RMS
AD DS
AD ALS
AD FS
What is the minimum RAM requirement for Windows Server 2008, assuming no special services are required?
256MB
1024MB
512MB
2048MB
Which of the following is not a possible port exception for Active Directory Rights Management Services?
Port 21
Port 80
Port 443
Port 445
When creating a trust between a server deeply embedded in the network and another server in another branch of the network, which of the following trusts would be best implemented from a design perspective?
External trust
Resource trust
Forest trust
Shortcut trust
Domain trust
Which of the following technologies encrypts hard drive information on a Windows Server machine in case it is physically compromised?
Windows NTFS encryption
FAT32 encryption
Windows BitLocker
Windows RODC
When Windows Server 2008 sends out replication over IP, what technology is it adding in addition to the IP protocol if you're in the same domain?
RDP
RPC
SMTP
FTP
When choosing your domain functional level, which level allows the use of the AES encryption for Kerberos?
Windows NT
Windows 2000 Server
Windows Server 2003
Windows Server 2008
To create forest trusts, what is the minimum functioning forest level that must be in use within your infrastructure?
Windows NT
Windows 2000 Server
Windows Server 2003
Windows Server 2008
Which of the following is not a design requirement to consider when planning your infrastructure?
Legal requirements
Organizational requirements
Operational requirements
Access requirements
If your enterprise is suffering periodic outages because of server overload and you would like to alleviate this overload by implementing a feature to split the process of Terminal Services across multiple terminal servers, what feature should you enable?
Terminal Services
Terminal Services Web Access
Terminal Services Gateway
Terminal Services Licensing
Terminal Services Session Broker
What Active Directory tool can be used to transfer accounts and Active Directory objects from one forest to another with Windows Server 2008?
ADMT 3.0
ADMT 3.1
Active Directory Users and Computers
The GPMC
Which of the following trust types is used for a Unix-based server in a Windows infrastructure?
Shortcut
Domain
External
Realm
Shortcut
By default, trusts within Windows Server 2008 that exist between a parent and child are what type? (Choose all that apply.)
One-way
Two-way
Transitive
Intransitive
Which of the following Active Directory technologies supports individual file security protection?
AD DS
AD CS
AD FS
AD RMS
Which of the following is not a Windows Server 2008 Terminal Services Licensing scope level?
Workgroup
Domain
Forest
Local
Terminal Services Gateway over Remote Desktop Protocol requires which port in order to connect successfully?
20
21
80
443
3389
What is the OU design concept that involves designing a specific part of an infrastructure to function on its own?
Autonomy
Automation
Anonymity
Administration
Which of the following group scope levels cannot be seen outside a local machine?
Global
Universal
Local
Domain local
Which of the following group conversions is not possible with Windows Server 2008?
Global to universal
Domain local to universal
Universal to global
Local to universal
Which of the following tools can be used for compliance auditing?
SCW
MBSA
GPMC
RSoP
Of the following four Group Policy application levels, which is applied first?
Site
Domain
Local
OU
When applying Group Policy, which of the following has the lowest precedence?
GPO linked to an OU
GPO linked to a domain
GPO linked to a site
Local GPO for a specific user
Local GPO for administrators/nonadministrators
Local GPO for local Group Policy
Using Windows Server 2008, Windows can identify computer components with what type of filter?
GPO
User
Computer
WMI
Scope
Which type of CA exists outside the role of the primary CA and issues certificates to other CAs?
Issuing CA
Enterprise CA
Stand-alone CA
Policy CA
Intermediate CA
Which editions of Windows support version 2 certificate templates? (Choose all that apply.)
Windows Server 2003 Small Business edition
Windows Server 2003 Standard edition
Windows Server 2003 Enterprise edition
Windows Server 2008 Standard edition
Windows Server 2008 Enterprise edition
What is the maximum number of logical processors supported by Windows Server 2008 Hyper-V?
4
8
12
16
32
Windows Server 2008 security practices recommend a certificate authority tier model that contains no more than how many tiers?
1
2
3
4
When implementing IPv6, what method of transition allows you to access both IPv4 and IPv6 from the same IP stack?
Dual stacking
Dual layering
Tunneling
Teredo
Which type of tunneling methodology is applied by default to Windows Vista without Service Pack 1?
ISATAP
6to4
Teredo
Host to host
Answers to Assessment Test
A. Centralized administrative designs involve the process of placing all your resources into one area. This can be further broken down into centralized/decentralized when you have resources in one area but personnel in another or into centralized/centralized when you have resources and personnel in one particular area. For more information, please see Chapter 1.
D. Active Directory Federation Services (AD FS) is a service that allows users to log on once and access resources across a complex network of servers by exchanging security resources. Essentially, a user can sign on once through single sign-on and be authenticated throughout the rest of the network without having to reenter a password. For more information, please see Chapter 1.
C. By default, the Microsoft minimum system requirements for Windows Server 2008 requires at least 512MB of RAM. If you're including other servers, or doing more complex tasks, this number will increase. Furthermore, the recommended setting is at least 2048MB of memory. For more information, please see Chapter 2.
A. Port 21 is the port required by File Transfer Protocol. Active Directory Rights Management Services requires ports 80, 443, 445, and 1433 to be enabled. For more information, please see Chapter 1.
D. A shortcut trust is a "quick pathway" between two forests that doesn't require authentication to be passed up and down the forest hierarchy. It alleviates the extra burden on already taxed domain controllers and creates a more stable environment. For more information, please see Chapter 3.
C. Windows BitLocker is a technology that encrypts hard drive information in case that drive is physically compromised. In such a case, the data cannot be accessed. NTFS does provide encryption, but not for the purpose of physical protection. FAT 32 does not provide encryption. For more information, please see Chapter 1.
B. When you are within the same domain, Windows Server 2008 uses Remote Procedure Call (RPC) over IP. However, if you are in separate domains, it is possible to use the Simple Mail Transfer Protocol for servers that may have unreliable WAN connections. For more information, please see Chapter 1.
D. Of all the domain functional levels, you must be operating at Windows Server 2008 level to use AES encryption for Kerberos. This allows tickets to be encrypted using this complex encryption for security purposes. For more information, please see Chapter 1.
C. To implement forest trusts, Windows Server 2003 is required. This was one of the major feature implementations of this version of Windows Server and was greatly needed within complex infrastructures with more than one forest. Windows Server 2008, because of the nature of the increase of functioning levels, also supports this technology. For more information, please see Chapter 3.
D. Legal, organizational, and operational requirements are all necessary in order to plan an appropriate design. Access requirements are embedded within operational requirements. If you require certain devices to be accessed at certain times, you can address this within your operational requirements. For more information, please see Chapter 5.
E. Terminal Services Session Broker (TS SB) is used to balance network traffic between terminal servers, similar to network load balancing. For more information, please see Chapter 4.
B. Windows Server 2008 requires the Active Directory Migration Tool (ADMT) version 3.1, as opposed to Windows Server 2003, which used version 3.0. For more information, please see Chapter 3.
D. External trusts are used for Unix-based operating systems that still need to communicate with a Windows environment. Unix systems exist in their own separate realm, defined by their own rules. For more information, please see Chapter 3.
B, C. Whenever child objects are created, a transitive, two-way trust is created between the child and parent object for the purpose of passing information between the two objects. For more information, please see Chapter 3.
D. Active Directory Rights Management Services is an enterprise level technology that is designed to support the deployment of individual protection for file security so that users can restrict permissions for their own individual files. For more information, please see Chapter 3.
D. Terminal Services Licensing is always applied at a "higher" level that includes overall design. This includes workgroups, forests, and domains. For more information, please see Chapter 4.
E. TS Gateway servers take advantage of the RDP protocol, which uses the standard port of 3389. For more information, please see Chapter 4.
A. Planning for autonomy is the process of setting up an individual part of the network, solely isolated for managerial reasons. For more information, please see Chapter 5.
C. Local groups are available only on the computers on which they are installed. By default, Windows Server 2008 contains several built-in local user types. For more information, please see Chapter 5.
D. Global to universal, domain local to universal, and universal to global group transitions are all possible in certain circumstances. However, a group cannot be translated from the local level to the universal level. For more information, please see Chapter 6.
A. Using the Security Configuration Wizard (SCW), a user can set up auditing and compliance for an entire network. For more information, please see Chapter 7.
C. Group Policy is always applied at the most granular level, so it can be overridden at the highest level. For more information, please see Chapter 6.
F. Group Policy is applied with the least precedence at the most granular level. This is because higher-tiered and linked GPOs should be more important. For more information, please see Chapter 6.
D. WMI filters are capable of surveying system components such as CPU, memory, and Windows version to test the application of GPOs in GPO filters. For more information, please see Chapter 6.
E. Intermediate CAs are used in higher-tiered models, such as three-tiered models, to provide intermediary CAs. For more information, please see Chapter 7.
C. E. Version 2 certificate templates always require Enterprise editions of Windows Server. For more information, please see Chapter 7.
D. Hyper-V can support up to 16 logical processors, but this does not necessarily mean there must be 16 physical processors. Hyper-V can split single processors into multiple logical processors. For more information, please see Chapter 10.
D. At a maximum, you should have a four-tiered CA model because of the complicated nature of having too many CA roles. At a certain level, a critical mass is reached. For more information, please see Chapter 7.
C. Dual layering is the process of layering both IPv4 and IPv6 on the same IP stack so that both versions of the IP protocol can access the network portion. For more information, please see Chapter 2.
A. By default, Windows Vista without Service Pack 1 includes ISATAP, which is a dual stacking technology used for public and private addressing. For more information, please see Chapter 2.
