Which action should be taken?

Topic 2, ABC Industries
Overview
ABC Industries is an International fishing, shipping and distribution company distributing various
ocean delectable to customers around the world. ABC Industries main office is located in Long
Beach, California with branch offices located in Dallas, Boston and Houston.
Existing Environment
ABC Industries network contains a single Active Directory domain named ABC.com. ABC
Industries servers run Microsoft Windows Server 2008 R2. The Long Beach office contains DNS
servers, DHCP servers and File servers. The client computers are all utilizing Microsoft Windows 7
Home Premium.
ABC Industries branch offices contain a single DNS and DHCP server. The branch offices have
several client computers still running the older Microsoft Windows XP Professional operating
system. The branch office networks are configured with multiple subnets. The offices utilize
network connections that transmit and receive information at 1 gigabit per second network speeds
with VPN connections for connecting offices and Internet access.
Current Issues
ABC Industries is aware of the low bandwidth WAN link utilized between Long Beach and Boston
has a very high latency and can only be replaced in the upcoming year.
Application Requirements
ABC Industries plans on developing an application named ABCProducts which will be offered to
customers as a service. The ABCProducts application utilizes a front-end Web server, Windows
Communication Foundation (WCF) and back-end Microsoft SQL Server 2008 R2 database.
ABC Industries plans on utilizing several virtual machines for hosting the tiers of the application
since Multiple-tiers cannot coexist on a single virtual machine. ABC Industries customers would be
able to choose from the Standard service which includes a single interface for each virtual
machine. The Executive service option includes multiple instances of each virtual machine
required by the application for high-availability and fault tolerance.
The Long Beach office File server hosts the virtual hard disk (VHD) files in a file share which is
available if the server suffers a failure. ABC Industries has future plans for an application named
ABCPartners which will utilize a front-end Web server and dedicated back-end SQL Server 2008
R2 database server. The Dallas office will be utilized for their virtual machines configured in a
Hyper-V cluster for hosting the ABCPartners application utilized by a sister company named
KingEngineering. ABC Industries makes a backup of the ABCPartners application virtual machines
to the Dallas office.
The KingEngineering sister company has a single Active Directory domain named ABC.com.
KingEngineering network infrastructure includes a server hosting Active Directory Federation
Services (AD FS) server role and all of the Active Directory Federation Services (AD FS} role
services.
Planned Changes
ABC Industries plans on replacing the Microsoft Windows Server 2008 R2 servers with servers
running Microsoft Windows Sever 2012 and configure a private cloud for utilization using Microsoft
System Center 2012 for the hosting of ABCProducts application. The Long Beach office will
acquire Hyper-V hosts on the perimeter network and local network. The Dallas office will acquire
new Hyper-V hosts whilst the Long Beach office is configured to utilize a Public Key Infrastructure
(PKI). ABC Industries also want Microsoft System Center 2012 Configuration Manager primary
site with all system deployed at the Long Beach office.

Notification Requirements
ABC Industries wants to utilize Help Desk tickets which will be generated automatically in event of
ABCProducts application instances becoming unresponsive whilst ensuring the Executive
customers receive additional e-mail notification for instances of tickets to their ABCProducts
application.
Technical Requirements
ABC Industries wants hardware and software costs minimized wherever possible whilst reducing
the amount of WAN traffic and administrative overhead. ABC Industries additionally wants to
ensure the ABCPartners application has the fastest possible failover for virtual machines whilst
ensuring the administrators are able to view consolidated reports concerning software updates of
all offices. ABC Industries wants only the Long Beach office administrators to approve of updates
for computers in all offices.
Security Requirements
ABC Industries has foreseen the need for an offline root certification authority (CA) which will be
utilized for issuing certificates to client computers via a server in respective offices. ABC Industries
wants to ensure all security events concerning the CA configuration and security settings are
logged whilst allowing client computers to renew certificates over the Internet.
ABC Industries wants members of the group ABC1 to create new instances of ABCProducts
application utilizing the private cloud whilst ensuring new certificates are issued when client
computers are connected to local networks only. ABC Industries wants to have BitLocker Drive
Encryption (BitLocker) utilized by the virtual machines hosting ABCPartners application instances
whilst ensuring sister company KingEngineering network administrators are able to access
ABCPartners application instances utilizing ABC.com network credentials.
************************************************************

You work as the network administrator at ABC.com. ABC.com consists of a single Active Directory
domain named ABC.com. ABC.com domain controllers run Microsoft Windows Server 2012 and
all client computers utilize Microsoft Windows 7. ABC.com has recently deployed a computer
named ABC-DC01 to the domain.
ABC-DC01 is configured with the Active Directory Domain Services (AD DS) and Active Directory

Certificate Services (AD CS) roles. ABC.com wants you to implement a solution which is able to
deploy over 16000 certificates for externally accessible web servers which utilize Secure Sockets
Layer (SSL) and 32000 certificates for e-mail with Internet-based clients.
Which action should be taken?

A.
You should consider implementing the Certificate Enrollment Policy Web Service role and
Certificate Enrollment Web Services role.

B.
You should consider implementing an Online Responder.

C.
You should consider utilizing an online issuing CA and a root CA.

D.
You should consider utilizing two online enterprise root CA and two offline enterprise issuing
CA.

E.
You should consider utilizing an offline enterprise root CA and offline enterprise policy CA.

F.
You should consider utilizing a subordinate CA and enrolling it to an external root CA.

G.
You should consider utilizing an offline standalone root CA and online enterprise issuing CA.