070-297 全真模擬試験 DEMO

問題11: Overview
Litware, Inc., is a corporate management company that manages the internal operations for its business
customers.
Internal operations include sales, accounting, and payroll.
Physical Locations
Litware, Inc., has two main offices in the following locations:
? New York
? Chicago
Each office has approximately 300 users.
The New York office has a branch office in Boston. The Boston office has approximately 100 users.
Staff in the Boston exclusively office work on projects for customers in the New York office. The Boston
office has no customers of its own.
Planned Changes
As part of its initiative to streamline the IT environment and increase network security, the company has
decided to implement a Windows Server 2003 Active Directory environment.
The New York office is currently in negotiations to secure Contoso, Ltd., as a new customer.
Business Processes
Litware, Inc., manages the business operations for eight business customers. For each customer,
Litware,
Inc. has a dedicated staff that works exclusively with that customer.
Users require access only to project data for the customers to which they have been directly assigned.
The
New York and Chicago offices are responsible for their own customers and maintain them separately.
Each individual customer project is listed in the following table.
Customers name Managed by
Alpine Ski House New York
Baldwin Museum of Science Chicago
Coho Vineyard New York
Fabrikam, Inc. New York
Humongous Insurance Chicago
Lucerne Publishing New York
Wingtip Toys Chicago
Woodgrove Bank Chicago
The chief information officer is the only person who is authorized to implement any changes that will
impact the entire company. Roles and responsibilities in the IT department are shown in the following
table.
Directory Services
Currently, Litware, Inc., has two Windows NT 4.0 domains configured a shown in the Existing Domain
Model exhibit.
The New York domain contains user and computer accounts for both the New York and Boston offices.
The Chicago domain contains user and computer accounts for the Chicago office.
Litware, Inc., users require access only to project data for the customers to which they have been directly
assigned. They also require access to internal company resources, such as a time-building application
that is hosted in the New York office.
Accounting auditors and executives require access to data from all customer projects to perform
quarterly reports, account reviews, and billing verifications. Account auditors and executives are located
in both New York and Chicago offices, and frequently travel between offices.
Network Infrastructure
The existing network infrastructure is shown in the Existing Network Infrastructure exhibit.
All Internet access is provided through a proxy server located in the New York office. The proxy server
provides Internet name resolution on behalf of the client computers.
Currently, all servers run Windows NT Server 4.0 with the latest service pack installed. A time-billing
application is installed on a Microsoft SQL Server computer named SQL1. SQL1 is managed by the
network administrators in the New York office, and is accessed by all Litware, Inc., users.
The company??s servers, including their domain membership, physical locations, and network functions,
are shown in the following table.
Server name Domain Office Functions
DC1 New York New York PDC, DHCP server
DC2 New York New York BDC, WINS server
DC3 New York Boston BDC, DHCP server,
WINS
server
Member
server
Fileserver1 New York New York ,DHCP server, file
server
Fileserver2 New York New York Member server,
WINS server,
file
server
Fileserver3 Chicago Chicago Member server
DHCP server,
file
server
Fileserver4 Chicago Chicago Member server,
WINS server,
file
server
SQL1 New York New York Member server,
SQL Server
computer,
timebilling
application
server
Most required network resources are available locally.
All client computers in the company run Windows 2000 Professional.
Problem Statements
The following business problems must be considered:
? Contoso, Ltd., requires that the new Active Directory infrastructure is completely in place prior to
obtaining the contract.
? Administrative authority for network administrators in the New York and Chicago offices must
remain equal.
Chief Executive Officer
The addition of Contoso, Ltd., as a customer will likely increase annual revenue by 50 percent.
Additional funds and resources have been allocated to secure this contract. All efforts should be made to
demonstrate to the Contoso, Ltd., representatives that we will address all of their security concerns. This
will be done on part though a migration to the Windows Server 2003 Active Directory environment.
Any short-term costs associated with a technology deployment are acceptable if they allow for growth
and flexibility in the future.
Chief Information Officer
A Web-based interface for the time-billing application will be implemented in the near future. The
current network administrators in the New York and Chicago offices perform their jobs well.
To reduce the burden on IT staff, trusted individuals within the organization should be identified to help
reduce the IT administrative burden.
Office Worker
We want to be able to access the internal network from our home computers.
Business Drivers
The following business requirements must be considered:
? The company wants access to the network to remain easy and intuitive. A company policy now
states that user logon names and e-mail addresses should be identical. Currently, each user has an
e-mail address made up of that user??s first initial and last name, and an additional domain name
indicating the region that manages that user??s account. For example, the user Nicole Caron from
the New York office has the e-mail address of [email protected]. The user Luis Bonifaz
from Chicago has the e-mail address of [email protected].
? The domain name litwareinc.com has been registered.
? To ensure reliability in the event of a single WAN link failure, users should continue to
authenticate on the network. Additionally, all domains should be fault tolerant in the event of a
single domain controller failure.
? VPN access will be provided to enable user access to customer data outside of regular business
hours. VPN connections will be assigned through the New York office.
Organizational Goals
The following organizational requirements must be considered:
? As part of the negotiations between Contoso, Ltd., and the New York office, Litware, Inc., has
agreed to ensure that all users who require access to Contoso, Ltd., data must have complex
passwords that are a minimum of 10 characters in length.
? The company has also agreed that management of Contoso, Ltd., data must be completely isolated
from all other Litware, Inc., data. This included the ability to manage security of Contoso, Ltd.,
resources. There will be no exceptions.
? Planning for other aspects of how Contoso, Ltd., will integrate with the Litware, Inc., environment
is premature at this point. However, a quick migration solution for the existing environment must
be identified to allow for this anticipated growth.
? Litware, Inc., account auditors and executives from the New York and Chicago offices will require
limited access to Contoso, Ltd., data.
Security
The following security requirements must be considered:
? A new Web-based interface will be implemented for the time-billing application running on SQL1.
This application will use IIS, and will require the use of IP filtering that uses computer host names
for security purposes.
? Only authorized computers within the internal Litware, Inc., network will be given access to the
time-billing application.
Active Directory
The following Active Directory requirements must be considered:
? The network administrators in the Chicago and New York offices will retain their current
responsibilities, such as the management of user accounts, servers, and domain controllers for
their regions. There should be no overlap between their administrative authority.
? There is a need to allow trusted individuals responsible for each customer project to manage user
account information. Responsibilities will include the ability to reset passwords and define
personal user information on user accounts, such as phone numbers and addresses. The trusted
individuals will be allowed to manage only user accounts within the customer project to which
they have been assigned.
Network Infrastructure
The following infrastructure requirements must be considered:
? Users in the Chicago office access Internet-based resources frequently. This Internet-related
traffic accounts for most of the bandwidth used between the Chicago and New York offices.
Bandwidth utilization between these two offices is currently a cause for concern. Network traffic
between the Chicago and New York offices must be minimized whenever possible.
? Because of the Boston office??s data access requirements, a high level of availability and reduced
latency between the New York and Boston offices is required. Bandwidth utilization between the
Boston and New York offices is minimal and is not a concern in the foreseeable future.
? A Windows Server 2003 computer will provide VPN access to the network by using both L2TP
and PPTP. Usage statistics will be gathered over time to identify which users establish VPN
connections to the network, and the duration of their connections. These usage statistics will help
the company track trends and plan for future growth.
? The network administrator in Chicago has extensive knowledge of DNS, and will manage the
implementation of the DNS infrastructure for the Litware. Inc., network.
? The DNS structure must be secured against any unauthorized modifications, but also must be easy
to maintain and manage.
正解: