Designing and Implementing a Server Infrastructure Flashcards

The new DHCP servers are put into place and given permission. The server and scope configurations are imported from PAl and AMl. Once PAl and AMl have been shut down, you must ensure clients may still get DHCP address assignments. The answer must satisfy the technical specifications. What ought you to do?

Answer: Execute the Get-DhcpServerv4Lease and Add-DhcpServerv4Lease commands. Turn on the scopes.

To ensure clients can still get DHCP address assignments after old DHCP servers are shut down, it is crucial to migrate existing lease information. The `Get-DhcpServerv4Lease` cmdlet retrieves current leases from the old servers, and `Add-DhcpServerv4Lease` imports these leases into the new DHCP servers. After importing the leases, the scopes on the new servers must be activated to begin assigning IP addresses and ensure uninterrupted service for clients.

It would be best if you suggested a management strategy for the GPOs. The answer must satisfy the technical specifications. What should the recommendation contain?

Answer: Microsoft Desktop Optimization Pack (MDOP)

For effective and controlled management of Group Policy Objects (GPOs), the Microsoft Desktop Optimization Pack (MDOP) is the recommended solution. MDOP includes Advanced Group Policy Management (AGPM), which provides robust change management, version control, and delegation capabilities for GPOs. This helps streamline GPO deployment, prevent errors, and facilitate rollbacks, making it an essential tool for a structured GPO management strategy.

Planning is underway to shut down research.contoso.com. You must ensure that the user accounts transferred to contoso.com can be managed by an administrator named "AdminS" in the research department. The fewest permissions that are possible must be granted to Admin5. What actions should you take before moving the user accounts?

Answer: The Delegation of Control Wizard should be launched after creating a new organizational unit (OU)

To grant an administrator (AdminS) the fewest possible permissions to manage user accounts in a specific department after they are moved, you should first create a new Organizational Unit (OU). Then, launch the Delegation of Control Wizard on this new OU. This wizard allows you to delegate specific administrative tasks, such as managing user accounts, to AdminS, adhering to the principle of least privilege.

You must suggest modifications to the DNS setup to enable the use of the sales.contoso.com domain. The solution must guarantee that users across all disciplines can resolve Internet and server names across all internal parts. What ought you suggest?

Answer: Create a zone delegation in the contoso.com zone on the DNS servers for contoso.com. Add a forwarder to the contoso.com DNS servers on the sales.contoso.com DNS servers

To enable name resolution across contoso.com and sales.contoso.com, a zone delegation is the most effective solution. You should create a zone delegation for sales.contoso.com in the contoso.com DNS zone, which directs queries for sales.contoso.com to its authoritative DNS servers. Additionally, configuring a forwarder on the sales.contoso.com DNS servers to the contoso.com DNS servers ensures that sales.contoso.com can resolve names in the parent domain and access the internet through the corporate DNS infrastructure.

Two new servers that will be set up as RADIUS servers are being planned for implementation. It would be best if you suggested the configuration for the VPN servers be used. The answer must satisfy the technical specifications. What actions should you take on every VPN server?

Answer: Modify the authentication provider.

When implementing new RADIUS servers for authentication, each VPN server must be configured to use these new servers as its authentication provider. This involves modifying the authentication settings on the VPN servers to point to the newly deployed RADIUS servers. This ensures that all VPN client connection requests are correctly forwarded to the RADIUS servers for centralized authentication and authorization.

Before deploying the new web application, you must suggest which network changes must be made. What should the recommendation contain?

Answer: The domain controllers should be upgraded to Windows Server 2012.

To support a new web application, especially one that might leverage modern Active Directory features or security enhancements, it is often necessary to upgrade the domain controllers. Upgrading domain controllers to Windows Server 2012 (or 2012 R2) allows for raising the domain and forest functional levels. This unlocks new Active Directory capabilities, improves security, and ensures better compatibility and performance for newer applications.

It would be best if you suggested a VPN solution that is fault-tolerant. The answer must satisfy the technical specifications. What should the recommendation contain?

Answer: Network Load Balancing (NLB)

For a fault-tolerant VPN solution, Network Load Balancing (NLB) is the appropriate recommendation. NLB distributes incoming VPN client connections across multiple VPN servers, ensuring high availability and resilience. If one VPN server fails, other servers in the NLB cluster can continue to handle the load, preventing service interruptions for remote users.