350-001 testking, 640-802 dumps and VCP-310

You must design the Willow Bridge, Inc. Active Directory Infrastructure.350-001 To this
end you need to apply the appropriate security configurations to
Leading the way in IT testing and certification tools, www.certifyme.com
- 43 -

WB-SR01 and WB-DB01. You now need to make a decision on which method you
will use to achieve this goal.

What should you do?

A. Configure the appropriate security settings for WB-SR01 and WB-DB01 in two
separate Group Policy Objects (GPOs) and link each GPO to a separate OU.640-802 Then place
WB-SR01 and WB-DB01 in the appropriate OUs.
B. Specify the appropriate security settings in the local security policy of WB-SR01 and
WB-DB01 respectively.
Configure two GPOs and link each GPO to the appropriate OU and then place WB-SR01
and WB-DB01 in the appropriate OUs.
C. Change the Default Domain Policy GPO to include all the required security settings
for both WB-SR01 and WB-DB01.
Use permissions to filter the scope of the GPO to apply the appropriate settings to
WB-SR01 and WB-DB01.
D. Create a GPO that includes all the required security settings for both WB-SR01 and
WB-DB01 and link the GPO to the domain.
Filter the scope of the GPO to apply the appropriate settings to WB-SR01 and
WB-DB01 by means of a WMI filter.
Answer: A
Explanation: You need to configure two GPOs, link it to separate OUs and then place
WB-SR01 and WB-DB01 into the appropriate OU.

1. Group Policy is to be used to configure the Web-server named WB-SR01; and the
SQL server named WB-DB01.
2. Security requirements for WB-SR01 differ from the WB-DB01 security requirements.

Incorrect answers:
B: You should first create the GPO then link it to the appropriate OU.
C: The default Domain Policy GPO is created automatically when a domain is created.
Any settings to this GPO will override local security policies on any domain member
computers.
D: Though it is possible to make use of WMI filters to filter the default scope of a GPO
to affect the GPO to apply only to a subset of computers that would be targeted with the
GPO,VCP-310 but you cannot combine different security settings for both WB-SR01 and
WB-DB01 in the same GPO and apply only the appropriate settings to each computer
respectively.

Reference:


Leading the way in IT testing and certification tools, www.certifyme.com
- 44 -

Walter Glenn, and Michael T. Simpson; MCSE 70-297 Training Kit - Designing a
Windows server 2003 Active Directory and Network Infrastructure, Chapter 4, pp. 4-27
to 4-28.
Microsoft Windows Server 2003 Deployment Kit - Designing a managed Environment:
Designing Group Policy Infrastructure