Which of the following should Wendy do to complete the deployment of AD RMS with the least amount of administrative effort and capital expenditure? (Each correct answer represents a partial solution. Choose two answers.)

	A.	Upgrade all Windows XP client computers to Windows Vista Business.
	B.	Upgrade all Windows XP client computers to Windows Vista Ultimate.
	C.	Ensure that all Windows XP client computers have Service Pack 2 or later, and install the RMS client on these computers.
	D.	Upgrade domain controllers to Windows Server 2008, and set the domain and forest functional levels to Windows Server 2008.
	E.	Obtain and install an SSL certificate from a trusted root certification authority.

Heather has read about all the advantages of using RODCs to authenticate users in her company’s branch offices and is planning to set up an RODC in each of the branch offices. Which of the following does she need to do before setting up the RODCs? (Each correct answer represents part of the solution. Choose four answers.)

	A.	Upgrade all Windows 2000 Server domain controllers to either Windows Server 2003 or Windows Server 2008.
	B.	Upgrade all Windows 2000 Server and Windows Server 2003 domain controllers to Windows Server 2008.
	C.	Raise the domain and forest functional levels to Windows Server 2003.
	D.	Raise the domain and forest functional levels to Windows Server 2008.
	E.	Upgrade the PDC emulator to Windows Server 2003.
	F.	Upgrade the PDC emulator to Windows Server 2008.
	G.	Run the Adprep /rodcprep utility on the schema master.
	H.	Run the Adprep /rodcprep utility on the infrastructure master.

Nobody in the Waco office is highly skilled in network administration, but an employee named Fred has demonstrated the ability to perform hardware upgrades and minor configuration changes, so you would like him to have the ability to perform these actions on the RODC. What should you do to grant him this capability without giving him excessive domain administrative privileges?

	A.	Add his user account to the Domain Admins group.
	B.	Add his user account to the local Administrators group on the RODC.
	C.	Add his user account to the Server Operators group.
	D.	Add his user account to the Power Users group.

One weekend, contractors excavating for a new addition to the building holding the branch office accidentally severed the ISDN line. Repairs will take a day or two. On Monday morning, a user named Margaret reports that she is unable to log on. Which of the following is the most likely reason why she was unable to log on?

	A.	Her user account is also listed in the Denied list on the RODC’s password replication policy.
	B.	She changed her password on the previous Friday.
	C.	Her user account is included in the password cache that Jim has configured on the partnered writable domain controller.
	D.	Her user account is not included in the list of users contained in the RODC’s SAM.

The agency frequently contracts road work to private consultants, who need access to a web-based application that holds specifications and other data required for the work projects. All private consultants operate AD DS networks with either Windows 2000 or Windows Server 2003 domain controllers.

Susan is required to provide access for consultant employees without creating or managing user accounts for these employees, and she must keep the internal network secure from external access. Which of the following should she do? (Each correct answer represents part of the solution. Choose all that apply.)

	A.	Install an AD RMS server and configure rights-protected documents.
	B.	Install AD FS on an internal server and create a federated trust.
	C.	Install an AD FS proxy server in the perimeter network.
	D.	Install an AD FS web agent.
	E.	Install a domain controller on the perimeter network to simplify the authentication of consultant employees.
	F.	Install an AD LDS server on the perimeter network to simplify the authentication of consultant employees.