Testlet: School of Fine Art
You need to recommend changes to the existing environment that meet the company's security requirements for the file server on the main campus.
What should you recommend?
Case Study Title (Case Study): COMPANY OVERVIEW
School of Fine Art is an educational institution that has a main campus and two satellite campuses.
The main campus is located in New York. The satellite campuses are located in Los Angeles and Chicago.
The main campus has approximately 4,000 users made up of students, faculty, and employees. Each satellite campus has approximately 1,000 users made up of students, faculty, and employees.
EXISTING ENVIRONMENT
The network contains a single Active Directory domain named fineartschool.net.
All servers run Windows Server 2008 R2. All client computers run either Windows XP or Windows 7.
The network contains Microsoft Application Virtualization (App-V) and Microsoft Enterprise Desktop Virtualization (MED-V).
Existing Network Infrastructure
The main campus has the following servers:
A file server that contains confidential files.
A print server that has several printers installed.
A server that has the Windows Server Update Services (WSUS) server role installed. All client computers are updated by using the WSUS server.
The main campus has a computer lab. The lab has 50 client computers that run Windows 7 Enterprise.
The computer accounts for the lab computers are located in an organizational unit (OU) named LabOU. The user accounts and computer accounts for all of the students are located in an OU named StudentsOU. Both OUs are child objects in the fineartschool.net domain.
The relevant Group Policy objects (GPOs) are configured as shown in the following table.

REQUIREMENTS Technical Requirements
The computer lab must meet the following requirements:
Ensure that the user settings in all domain-level GPOs are applied to each student.
Prevent the settings in all domain-level GPOs from being applied to the client computers in the computer
lab. The update management infrastructure must meet the following requirements:
Each campus must control the updates for its respective campus.
Update status reports must be sent weekly to the Enterprise Administrator on the main campus.
Application Requirements
All client computers will be upgraded to Windows 7 Enterprise.
An application named App1 runs on every client computer. App1 is only compatible with Windows XP. App1 must remain available after all of the operating system upgrades are complete.
App1 must meet the following requirements:
App1 must be available from the Start menu.
The management of App1 must be centralized.
Each user must have a unique instance of App1.
Security Requirements
Security for the file server on the main campus must meet the following requirements:
Unauthorized users must be prevented from printing sensitive files stored on the server.
The contents of the server's hard disks must remain secure if the physical security of the server is compromised.
Problem Statements
Users report that they receive a different desktop environment every time they log on to a client computer in the computer lab.
The print server on the main campus has reliability issues. A malfunction on a single printer often causes other printers to malfunction.

• A. Deploy Active Directory Rights Management Services (AD RMS) and create an AD RMS rights policy template.
• B. Deploy Print and Document Services and create a custom printer filter.
• C. Deploy Network Policy Server (NPS) and create a network policy.
• D. Deploy File Server Resource Manager (FSRM) and create a file classification rule.

A company has servers that run Windows Server 2008 R2 and client computers that run 32-bit Windows 7 Enterprise. The environment includes Microsoft Application Visualization (App-V).
You plan to deploy a 64-bit only application. You need to ensure that users can run the application. The application must be automatically available on the client computers.
Which actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Use only actions that apply.)
Select and Place:

Baldwin Museum of Science
You need to recommend a monitoring solution for App1 that meets the museum's technical requirements.
What should you include in the recommendation?
Case Study Title (Case Study): COMPANY OVERVIEW
The Baldwin Museum of Science is an internationally renowned museum of science history.
Physical Location
The museum has a main office and a branch office named Branch1. The main office has 5,000 users. Branch1 has 1,000 users.
The main office connects to Branch1 by using a WAN link. The WAN link is highly saturated.
The museum has a sales department. All of the users in the sales department have client computers that run Windows XP Service Pack 3 (SP3).
EXISTING ENVIRONMENT Active Directory Environment
The network contains one Active Directory forest. The forest contains two domains named baldwinmuseumofscience.com and ad.baldwinmuseumofscience.com.
All user accounts and computer accounts for all employees are in the ad.baldwinmuseumofscience.com domain. The organizational unit (OU) structure for ad.baldwinmuseumofscience.com is shown:

Network Infrastructure
The network contains the following servers and Applications:
Application servers that run either Windows Server 2003 Service Pack 2 (SP2), Windows Server 2008 SP2, or Windows Server 2008 R2.
A custom Application named App1 that runs on all of the Application servers. App1 writes events to the Application log.
A line-of-business Application named App2 that requires Internet Explorer 6. All of the users in the sales department run App2.
File servers that run Windows Server 2008 R2. The main office has the following:
A two-node failover cluster that runs Windows Server 2008 R2 and has the Hyper-V role installed and a Clustered Shared Volume. The failover cluster hosts four virtual machines (VM) that run Windows Server 2008 R2. The VMs are stored on the Clustered Shared Volume. Each VM runs Microsoft SQL Server 2008.
A server named Server1 that hosts two shared folders named Share1 and Share2. Share1 hosts 50,000 research documents that are shared by multiple users. Share2 hosts documents that are created by users in the sales department.
Administration Model
All users in Branch1 are members of global groups and universal groups. The groups are located in an OU named Groups in the ad.baldwinmuseumofscience.com domain.
REQUIREMENTS Planned Changes
The Baldwin Museum of Science plans to implement a new branch office named Branch2.
Branch2 will be configured as a separate Active Directory site.
Branch2 will be configured to meet the following requirements:
Minimize the cost of deploying new servers.
Contain only client computers that run Windows 7.
Connect to the main office by using a saturated WAN link.
Contain only servers that run Windows Server 2008 R2. The servers will be configured as either file
servers or Web servers. The file shares on the file servers must be available if a single file server fails. In Branch2, if a single domain controller or a WAN link fails, users in the branch must be able to:
Change their passwords.
Log on to their client computers.
Technical Requirements
The Baldwin Museum of Science must meet the following technical requirements:
Hardware and software costs must be minimized whenever possible.
All VMs must be backed up twice a day.
All VM backups must include the VM configuration information.
Events generated by App1 must be stored in a central location.
An administrator must be notified by e-mail when App1 generates an error.
The number of permissions assigned to help desk technicians must be minimized.
The help desk technicians must be able to reset the passwords and modify the membership of all users in Branch1.
If a user overwrites another user's research document, the user must be able to recover a previous version of the document.
When users in the sales department work remotely, they must be able to access the files in Share1 in the minimum amount of time.
Security
The Baldwin Museum of Science must meet the following security requirements:
All scripts that run on production servers must be signed.
Managers in Branch1 must be allowed to access the Internet at all times.
Web site administrators must not be required to log on interactively to Web servers.
Users in Branch1 must only be allowed to access the Internet between 12:00 and 13:00.
Users and managers must be prevented from downloading executable files from the Internet.
Administration of the corporate Web sites must support all bulk changes and scheduled content
updates.

• A. Microsoft System Center Operations Manager 2007 R2 and the SMTP service
• B. Resource Monitor
• C. Event subscriptions
• D. Microsoft SharePoint Foundation 2010 alerts

Your network contains an Active Directory domain. You have five organizational units (OUs) named Finance, HR, Marketing, Sales, and Dev. You link a Group Policy object named GPO1 to the domain as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that GPO1 is applied to users in the Finance, HR, Marketing, and Sales OUs. The solution must prevent GPO1 from being applied to users in the Dev OU. What should you do?
Exhibit:

• A. Enforce GPO1.
• B. Link GPO1 to the Finance OU.
• C. Modify the security settings of the Finance OU.
• D. Modify the security settings of the Dev OU.