You need to recommend a solution for deploying the domain controllers in the branch offices. The solution must meet the company's security requirements. What should you recommend?

Question

Exhibit

Options

• ADeploy writable domain controllers that run a Server Core installation of Windows Server
• BDeploy Read-only Domain Controllers (RODCs) that run a full installation of Windows Server
• CDeploy writable domain controllers that run a Server Core installation of Windows Server
• DDeploy Read-only Domain Controllers (RODCs) that run a full installation of Windows Server

• A
  10% (5)
• B
  2% (1)
• C
  8% (4)
• D
  81% (42)

Explanation

COMPANY OVERVIEW Coho Vineyard has a main office and 10 branch offices. Coho Vineyard plans to implement the following changes: - Assign IPv6 addresses to all client computers. - Deploy domain controllers in the branch offices. - Provide VPN access to all of the users in both forests. - Deploy Network Access Protection (NAP) in the cohovineyard.com - Ensure that only the users in the cohowinery.com accounting department can access the resources in cohovineyard.com. New software and hardware solutions must be implemented by using the minimum amount of administrative effort. Existing Active Directory Environment The network contains two Active Directory forests named cohovineyard.com and Each forest contains one domain. AN of the domain controllers in cohovineyard.com run Windows Server 2008 R2. All of the domain controllers in cohowinery.com run Windows Server 2003. The forests and the domains are configured as shown in the following table. Existing Network Infrastructure Each office is on a separate IPv4 subnet. All of the domain controllers are located in the main office. Technical Requirements Coho Vineyard must meet the following technical requirements: - All IPv6 addresses must use a private IP address range. - All IPv6 addresses must be routable between offices only. Security Requirements - Coho Vineyard must meet the following security requirements: - Ensure that client computers do not require certificates. - Prevent certain users from printing confidential documents and forwarding the documents by e-mail. - Prevent administrator passwords from being replicated to the domain controllers in the branch offices. - Control remote access to client computers that use static IP addresses and dynamically- assigned IP addresses. - Quarantine the local client computers and the remote client computers that do not have the latest Windows updates installed. - Ensure that the users in cohowinery.com can only access the shares in cohovineyard.com to which they have explicit permissions. - Ensure that all of the users who run Microsoft Office Outlook can perform global address list (GAL) lookups on a server in their local

No community discussion yet for this question.