Test your basic knowledge |

MCTS

Subjects : certifications, mcts, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. How many bits are in the site prefix?
Duplicate file identification - disk usage patterns - dormant files identification - and audit screening.
Windows PE and Windows.old.
3389
4 (bits 53 - 56) /56 Allows for 16 regions

2. How do you configure WSUS computer groups for defined updates?
Disable AutoComplete in Internet Explorer
By either using WSUS management console (server side targeting) or GPO (client side targeting).
Also known as root scalability mode. Allows organizations with more than 16 namespace servers use consistency mode. They poll the nearest dc every hour instead of the pdc emulator. This reduces network traffic to the pdc emulator but clients might ha
RRAS-VPN/Dialup - Wireless Access Points - Terminal Server Gateway - DHCP - and IPSEC(HRA).

3. Wireless profiles _____________ - the PC needs to be connected to the LAN first.
Delegate permission by configuring the dacl of the zone file.
Can be configured through a GPO
The Application Identity Service
Assign a ipsec policy to all computers - verify the computers can manually authenticate. Assign a client respond only IPSEC policy to the computers. Also either the request server or the security server need IPSEC polices assigned.

4. The print management console can be configured to _____________.
Send email notifications
One of the tunnels if DirectAccess by using a computer certificate. This tunnel provides access to an intranet Domain Name System (DNS) server and domain controller - allowing the computer to download Group Policy objects and to request authenticatio
The requesting of user authentication prior to connecting to the terminal server. This completes the user aoth before reaching the logon screen making the server more secure. This helps fight Denial of Service attacks - malicious users/software.
They must be configured with the ip addresses of the radius server.

5. What does the MigDocs.xml file do?
Use the Programs and Features Control Panel applet to
ISATAP Routers within an orginization - 6TO4 routers to transverse the internet - and TEREDO to traverse a NAT devise.
Configure the enforcement points as RADIUS clients.
Specify this file with both the ScanState and LoadState tools to migrate all user folders and files that resides on the root of any drive and in the Users directory. However - it does not find and migrate any application data - program files - or any

6. How do you setup a remote site that resolves names even when there is no connectivity to the main site?
vssadmin.exe. This can view previous version files as well.
It makes it easy to share your libraries and printers on a home network. You can share pictures - music - videos - documents - and printers with other people in your homegroup. The homegroup is protected with a password - and you'll always be able to
Deploy a secondary zone.
Computer certificates be installed on client computers

7. What is IPsec ESP tunnel?
Take the number of networks and take the square root of it. Subtract that number from the subnet mask. The result is the original mask.
All you have to do is purchase an upgrade key from Microsoft or another authorized retailer to unlock those new features.
MSCHAP2 is user/password authentication while EAP-TLS is comuter authentication via certificate or smart card.
One of the tunnels if DirectAccess by using both a computer certificate and user credentials. This tunnel authenticates the user and provides access to intranet resources and application servers.

8. What is AppLocker?
Install and run many Windows XP productivity applications directly from your Windows 7-based PC. It utilizes virtualization technology - such as Windows Virtual PC - to provide a virtual Windows XP Professional SP3 environment for Windows 7 so that o
It designates an authoritative DNS server - not the soa record.
A LAN Router only or a LAN to WAN Router
A new feature in Windows 7 and Windows Server 2008 R2 that replaces the Software Restriction Policies (SRP) feature. One of the advantages of Applocker rules over SRP is you can assign a rule to a security group or an individual user.

9. How do you restrict which DNS servers get a zone transfer?
No
Configure the primary zone to transfer to only DNS servers listed on the names server tab or by ip address.
No
Divide up a large WIM file into multiple smaller .SWM files

10. There is a RESET option in Internet Explorer to...
The latest Vista Service Pack
Set IE back to its default settings
Does not
Cannot be in different domains

11. How can you disable IPV6 from OSs that cant be uninstalled?
Forward to another DNS server
Uncheck IPV6 from the network properties.
A roecord to indicate the smtp server.
4 (bits 53 - 56) /56 Allows for 16 regions

12. What do NAP clients do?
Drop both inbound and outbound traffic
Scan through the %WinDir%WindowsUpdate.log (ie. C:WindowsWindowsUpdate.log) file.
They relay the status on polices to the Security center for NAP to validate the system to use the network.
Writes changes to a mounted WIM file - DISM /UNMOUNT-WIM /DISCARD will roll the changes back

13. What is DirectAccess?
Increase the minimum size of your paging file. Windows sets the initial minimum size of the paging file equal to the amount of random access memory (RAM) installed on your computer plus 300 megabytes (MB) - and the maximum size equal to three times t
Anew vpn protocol that uses SSL (port 443) for encryption.
In Windows 7 and Windows Server 2008 R2 it enhances the productivity of mobile workers by connecting them seamlessly and more securely to their corporate network any time they have Internet access—without the need to VPN. When your IT department enab
Command line equilivant of Server Manager. You can install/remove roles and features on server 2008?

14. What does Credential Manager allows you to store?
Credentials - such as user names and passwords that you use to log on to websites or other computers on a network. By storing your credentials - Windows can automatically log you on to websites or other computers. Credentials are saved in special fol
A new Microsoft proprietary file system supported in Windows 7 which is intended for flash drives but often called FAT64 - limit of 264 bytes (16 Exabytes).
Encapsulating Security payload protocol used for encryption the packets created by the AH.
So the downstream servers can recieve its approved updates via parent server. This allows multiple points of deployment. Downstream servers also can be delegated the permission to approve their own updates

15. How can you can prevent users from accessing certain MMC console snap ins?
Add an AD integrated zone
Install Windows Installer Packages (.MSI) files. You can script the installation.
DNS suffix search lists
Through a GPO.

16. What does a BranchCache client hosting content in distributed cache mode must have?
A network location.
Tools adds out-of-box drivers to a booted Windows PE image. It takes one or more driver .inf files as inputs.
Command to configure the TCP/IP settings.
Certain firewall rules configured for the Peer Discovery and Content Retrieval.

17. What will a (.root) zone do in a DNS server?
Prevents the server from performing Internet name resolution.
Use the route delete command.
Used to get a list of installed 3rd party drivers
Scan through the %WinDir%WindowsUpdate.log (ie. C:WindowsWindowsUpdate.log) file.

18. How do you delegate permissions to modify a specific DNS zone?
Used to control power settings and configure computers to default to Hibernate or Standby modes. For example - running Powercfg.exe -energy will analyze the computer for energy efficiency.
Credentials - such as user names and passwords that you use to log on to websites or other computers on a network. By storing your credentials - Windows can automatically log you on to websites or other computers. Credentials are saved in special fol
Delegate permission by configuring the dacl of the zone file.
It lets you launch process on a remote machine via command line. Example: winrs -r:(remotehost) ipconfig /all

19. What are the proven - standards-based technologies that DirectAccess is built on?
Netsh set dnsserver. Example: netsh interface ipv4 set dnsserver name="Local Area Connection" source=static address=192.168.0.100
Internet Protocol security (IPsec) and Internet Protocol version 6 (IPv6).
Take the number of networks and take the square root of it. Subtract that number from the subnet mask. The result is the original mask.
It enables you to surf the web without leaving a trail in Internet Explorer. This helps prevent anyone else who might be using your computer from seeing where you visited and what you looked at on the web. You can start InPrivate Browsing from the ne

20. What is File Server Resource Manager?
The ICMP protocol.
It insert drivers into the Windows Driver Store so that users can add the associated PNP hardware without having to provide the driver or administrator credentials
Create a customized shell
A suite of tools that allow administrators to understand - control - and manage the quantity and types of data stored on the servers.

21. How do you repartition your hard disk by using the Shrink feature in Disk Management?
If you are logged in as an administrator you can shrink an existing partition or volume to create unallocated disk space - from which you can create a new partition or volume. You can shrink a volume even on a Basic Disk.
They are written in XML and be created using the Windows System Image Manager or a text editor like notepad.
You will be prompted to reconnect online. To disable offline mode - select it from the Tools menu.
The domain profile not the public or private.

22. What is Optimize for Consistency polling mode do?
The DFS service attempts to keep the domain based namespace highly consistent by polling the pcd emulator after the namespace changes. This bypasses the needing to wait for the ad replication to update the namespace object. This can increase load on
For example - you can create rules based on the publisher attribute that is persistent through updates - or you can create rules for a specific version of a file.
Shaking (quickly dragging back and forth) a window minimizes all other windows. Shaking it again brings them back.
Tools adds out-of-box drivers to a booted Windows PE image. It takes one or more driver .inf files as inputs.

23. What is a mx record?
Anew vpn protocol that uses SSL (port 443) for encryption.
4 (bits 53 - 56) /56 Allows for 16 regions
Shaking (quickly dragging back and forth) a window minimizes all other windows. Shaking it again brings them back.
A roecord to indicate the smtp server.

24. What does Windows XP Mode requires?
A processor that supports the hardware virtualization using either the AMD-V or Intel VT options. 256MB of RAM is dedicated to the XP client so the Windows 7 computer should have at least 2GB of overall RAM. Windows XP Mode is only available in Windo
One of the tunnels if DirectAccess by using both a computer certificate and user credentials. This tunnel authenticates the user and provides access to intranet resources and application servers.
an email address where the @ is replaced with a period.
Pool Active Directory.

25. What are the ESRB Ratings?
Use the net sh command to configure the proper ports for remote management.
EARLY CHILDHOOD - EVERYONE - EVERYONE 10+ - TEEN - MATURE - ADULTS ONLY - RATING PENDING
Ina periority orderd based on the permission in the priority list. The first policy that is marked True from the conditions is selected. This order of policies can affect weather or not a user can remote access (dialup - vpn - wireless).
Extensive Authentication Protocol used in PPP authentication.

26. What does Cipher /X do?
You need to specify the files on both command lines using the /i option. Unlike previous versions of USMT - the .xml files are not copied to the store. Because ScanState and LoadState need the .xml files to control the migration - you should specify
Use WPA with AES encryption. WPA-Personal requires a preshared key and WPA-Enterprise uses Radius Authentication.
Use it to can backup certificates to a .PFX file that is password protected.
It is submitted to Microsoft for "device signing" to ensure the driver was adequately tested and will not affect the integrity of the operating system. Critical files are digitally signed so that any changes to these may be easily detected. However n

27. What should you use for enhanced wireless security?
Disable AutoComplete in Internet Explorer
Only Business Track Windows 7 editions (Professional - Enterprise - Ultimate).
Use WPA with AES encryption. WPA-Personal requires a preshared key and WPA-Enterprise uses Radius Authentication.
It insert drivers into the Windows Driver Store so that users can add the associated PNP hardware without having to provide the driver or administrator credentials

28. What does windows cardspace do?
It backs up digitally identities to a password protected file.
Yes - it can be modified to apply to a network location.
WECUTIL QC
It improves performance

29. Are Migrated user accounts are enabled by default?
Take the number of networks and take the square root of it. Subtract that number from the subnet mask. The result is the original mask.
WECUTIL QC
No they are disabled
So the downstream servers can recieve its approved updates via parent server. This allows multiple points of deployment. Downstream servers also can be delegated the permission to approve their own updates

30. What does DRIVERQUERY /SI do?
At the volume level - not the drive level.
L2TP/IPSEC with EAP-TLS.
Use Safe Mode and then roll back the driver if it was recently updated.
It will display driver signing status

31. What is WPA-PSK?
Increase the SOA refresh interval parameter.
WPA-Personal (uses a preshared key)
It can enable a windows feature on an offline image with the /Enable-Feature option
Only a local administrator

32. Why would you use audit-only mode?
Use your computer's zone ID at the end of the destination address. The zone ID of an IPV6 address is locally significant.
driveletter:\\WindowsImageBackup\
To deploy the policy and understand its impact before enforcing it.
Create persistent connections to computers with POWERSHELL

33. What does dnscmd /zoneadd primary do?
ImageX utility can extract the required operating system edition directly to the attached VHD file in Windows 7.
Configure aging and scavenging.
You can add more space to existing primary partitions and logical drives by extending them into adjacent unallocated space on the same disk. To extend a basic volume - it must be raw or formatted with the NTFS file system.
Adds a file based zone

34. How do you setup a DHCP server for redundancy?
A CA users trust or they will get error messages when trying to securely access a web site. They can avoid the error by installing the CA certificate to the Trusted Root Certificate Store.
L2TP/IPSEC with EAP-TLS.
You setup one the DHCP server with the same option settings and non-overlapping scopes. Make sure to duplicate any reservations.
You start by selecting Windows XP Mode from the Windows 7 Start Menu. You can install applications in Windows XP Mode just as you normally would on a physical PC. For example - you can install applications via web - from storage devices - or from phy

35. You can configure process monitor alerts to _____.
Problem Steps Recorder in the Windows 7 operating system is a feature that enables users to record their interactions with an application and provide a detailed screen-by-screen view with accompanying information including mouse clicks and keyboard i
Run scripts
WPA-Personal (uses a preshared key)
If your computer is running slowly or isn't working properly - you can use System Restore to return your computer's system files and settings to an earlier point in time using a restore point. For more information about System Restore - see System Re

36. What are the two ways that you can take advantage of system protection?

37. What is EAP?
Extensive Authentication Protocol used in PPP authentication.
Use the "Connect to a Workplace" option
Use the Advanced Firewall to define Connection Security Rules.
The ICMP protocol.

38. How do you install applications in Windows XP Mode?
You start by selecting Windows XP Mode from the Windows 7 Start Menu. You can install applications in Windows XP Mode just as you normally would on a physical PC. For example - you can install applications via web - from storage devices - or from phy
Can be configured through a GPO
The import and export affects the entire policy. For example - if you export a policy - all of the rules from all of the rule collections are exported - including the enforcement settings for the rule collections. If you import a policy - the existin
Generates a space-estimate file called Usmtsize.txt. This option does not collect the user state. You must also specify /nocompress.

39. What does Aero require?
Encapsulating Security payload protocol used for encryption the packets created by the AH.
System Restore Points as well as Previous Versions of Files (configured through the System applet).
It is where Internet access is direct and not routed through the VPN - configure advanced TCPIP network properties and uncheck the option "Use Default Gateway on Remote Network".
A WDDM driver for the graphics card and a Windows Experience index of 3.0 or greater.

40. How do you need to configure the NAP enforecment points if using in conjenction with NPS?
Configure the enforcement points as RADIUS clients.
Print services for unix can be configured to share out with the LPD (Line Printer Daemon) and clients send print jobs to LPD using LPR (Line printer remote) client software.
Command line equilivant of Server Manager. You can install/remove roles and features on server 2008?
SP3

41. How do you setup Ready Boost?
Each of the rule types. For example - the default rules for Executables are: Allow members of the local Administrators group to run all applications - Allow members of the Everyone group to run applications that are located in the Windows folder - Al
On the zone file of the DNS server in the DNS manager.
When you plug a ReadyBoost-compatible storage device into your computer - the AutoPlay dialog box offers you the option to speed up your PC using ReadyBoost. If you select this option - you can choose how much memory on the device to use for this pur
Only sites added to the local Intranet Zones

42. What OSs support SSTP?
Used to get a list of installed 3rd party drivers
Vista SP1 and Server 2008 and above.
It which enables content from file and Web servers on a wide area network (WAN) to be cached on computers at a local branch office. BranchCache can improve application response time and reduce WAN traffic. Cached content can either be distributed acr
When you plug a ReadyBoost-compatible storage device into your computer - the AutoPlay dialog box offers you the option to speed up your PC using ReadyBoost. If you select this option - you can choose how much memory on the device to use for this pur

43. What should you do if a host file is missing?
They need to be configured us use 802.1x RADIUS authentication
Only sites added to the local Intranet Zones
Use WPA with AES encryption. WPA-Personal requires a preshared key and WPA-Enterprise uses Radius Authentication.
You add it back to a DNS zone - clear the server DNS cache and clients DNS cache.

44. What is SSTP?
All Programs - Windows Virtual PC - Windows XP Mode Applications. To run your application directly from the Windows 7 desktop - just go to your Start menu.
Anew vpn protocol that uses SSL (port 443) for encryption.
Only a local administrator
The latest Vista Service Pack

45. What is a Subscription in event viewer?
4 (bits 49 - 52) /52 Allows for 16 regions.
A collection of logs created by computers fowarding events. Viewed on the collecting computer.
You can allow by adding the device vendor's GUID to the allow list in a GPO.
It is the max size is expressed in megabytes.

46. What does DISM do?
It can add a driver to an offline WIM image with the /Add-Driver option
EAP protocol.
All you have to do is purchase an upgrade key from Microsoft or another authorized retailer to unlock those new features.
Tools adds out-of-box drivers to a booted Windows PE image. It takes one or more driver .inf files as inputs.

47. What is Network Level Authentication?
Run scripts
An authentication method that completes user authentication before you establish a full Remote Desktop connection and the logon screen appears. This can help protect the remote computer from hackers and malicious software.
WPA-Enterprise (radius authentication)
Internet Protocol security (IPsec) and Internet Protocol version 6 (IPv6).

48. What does System Protection cover?
System Restore Points as well as Previous Versions of Files (configured through the System applet).
It will prevent a user from deleting files in a folder. Granting Modify permission to the Creator Owners Group will allow users to delete the files they create but not the files of other users.
It operates by deploying a computer that is running Windows Server 2008 R2 as a host in the branch office. Clients are configured with the fully qualified domain name of the host computer so that they can retrieve content from the Hosted Cache - when
Extensive Authentication Protocol used in PPP authentication.

49. What is the command to set a collecting computer for event log forwarding?
Netsh set dnsserver. Example: netsh interface ipv4 set dnsserver name="Local Area Connection" source=static address=192.168.0.100
Use the DHCPv6 to obtain both IPV6 addresses and additional configuration settings.
vssadmin.exe. This can view previous version files as well.
WECUTIL QC

50. How do you verify that an Auto Update Client is connecting to its WSUS Server?
A scheduled task that runs by default collecting information for the Reliability monitor. If disabled it must reenabled manually from the task scheduler mmc snapin.
Scan through the %WinDir%WindowsUpdate.log (ie. C:WindowsWindowsUpdate.log) file.
dynamic drives
Creates a bootable CD that runs the Windows Recovery Environment (WRE)