###BeginCaseStudy###
Case Study: 11
Nothwind Traders
Scenario
COMPANY OVERVIEW
Northwind Traders is an import/export company that has a main office and two branch
offices. The main office is located in Toronto. The branch offices are located in Vancouver
and Seattle. The main office has 2,000 users. Each branch office has 500 users.
EXISTING ENVIRONMENT
All client computers run Windows 7 Enterprise. All servers run Windows Server 2008 R2.
All new servers are deployed by using Windows Deployment Services (WDS).
Northwind Traders has multiple Hyper-V servers. The Hyper-V servers are managed by
using Microsoft System Center Virtual Machine Manager (VMM).
The perimeter network contains a standalone server. The server has the Active Directory
Lightweight Directory Service (AD LDS) service role installed. AD LDS is administered on
the server by using the Active Directory module for Windows PowerShell.
All virtual machines (VMs) access iSCSI-based storage by using a Microsoft iSCSI Initiator
installed on the VM.
Existing Active Directory/Directory Services
The network contains a single Active Directory forest named northwindtraders.com. The
forest contains five Remote Desktop servers. All Remote Desktop servers are in an
organizational unit (OU) named RD Servers.
TECHNICAL REQUIREMENTS
Northwind Traders must meet the following technical requirements:
• Minimize server downtime.
• Ensure that you can recover all of the data hosted on the VMs.
• Ensure that you can perform bare metal restores of the Hyper-V servers.
• Minimize the number of times a server restarts when it is deployed.
• Monitor the CPU utilization, memory utilization, and disk utilization of all the servers
to analyze performance trends.
• Ensure that a specific set of Group Policy settings are App1ied to users who use
Remote Desktop to connect to the Remote Desktop servers. The settings must differ from
those App1ied when the users log on locally to their own computers.
• Copy a custom Microsoft Office Word dictionary to the computers in the legal
department. Update the custom dictionary on a regular basis. Copy the updated version of the
dictionary as soon as possible to the legal department computers.
###EndCaseStudy###
You need to recommend a strategy to ensure that the administration of AD LDS is encrypted. What
should you include in the recommendation?
A.
a server authentication certificate
B.
client authentication certificates
C.
Digest authentication
D.
Windows Integrated authentication
Explanation:
http ://technet.microsoft.com/en-us/library/cc725767%28WS.10%29.aspx
The Lightweight Directory Access Protocol (LDAP) is used to read from and write to Active Directory
Lightweight Directory Services (AD LDS). By default, LDAP traffic is not transmitted securely. You can
make LDAP traffic confidential and secure by using Secure Sockets Layer (SSL) / Transport Layer
Security (TLS) technology.
To enable SSL-based encrypted connections to AD LDS, you must request and obtain a server
authentication certificate from a trusted certification authority (CA) in your organization or from a
trusted third-party CA. For more information about installing and using a CA, see Certificate Services
(http ://go.microsoft.com/fwlink/?LinkID=48952).