Test your basic knowledge |

MCTS

Subjects : certifications, mcts, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What is a split tunnel VPN?
A type of port forwarding that allows public network computers on a Private network through nat devises.
By an EFS Data Recovery Agent. If the computer is in a workgroup and the user has forgotten their password - the user should recover their own password with a Password Reset Disk in order to retain access to their encrypted files. If the administrato
It is where Internet access is direct and not routed through the VPN - configure advanced TCPIP network properties and uncheck the option "Use Default Gateway on Remote Network".
Suggested Sites

2. What does AppLocker allows you to generate default rules for?
The Default Programs Control Panel applet
ISATAP Routers within an orginization - 6TO4 routers to transverse the internet - and TEREDO to traverse a NAT devise.
Each of the rule types. For example - the default rules for Executables are: Allow members of the local Administrators group to run all applications - Allow members of the Everyone group to run applications that are located in the Windows folder - Al
It contains the necessary tools and documentation to evaluate and mitigate application compatibility issues before deploying Windows 7 - Windows Vista - a Windows Update - or a new version of Windows Internet Explorer in your environment.

3. Why would a secondary DNS server stop responding to client queries?
This happens because the zone records expire. This occurs because the secondary zone has not successfully zone transferred before the "Expires After" SOA.
It is submitted to Microsoft for "device signing" to ensure the driver was adequately tested and will not affect the integrity of the operating system. Critical files are digitally signed so that any changes to these may be easily detected. However n
Perform an offline migration
You can add more space to existing primary partitions and logical drives by extending them into adjacent unallocated space on the same disk. To extend a basic volume - it must be raw or formatted with the NTFS file system.

4. What are soft disk quotas?
they are enforced and will not allow a user to exceed the space limit.
Use the "Connect to a Workplace" option
By using the DISM command with a /Set-Edition option: Example: DISM /IMAGE:C:SAMPLE.WIM /Set-Edition:Ultimate
They are monitored but not enforced. Users can exced there quota limit.

5. How do you initiate a zone transfer?
It contains new capabilities and extensions that you can: Define rules based on file attributes - Create exceptions to rules - Import and export rules - and use audit-only mode.
Writes changes to a mounted WIM file - DISM /UNMOUNT-WIM /DISCARD will roll the changes back
Use dnscmd /zonerefresh.
It which enables content from file and Web servers on a wide area network (WAN) to be cached on computers at a local branch office. BranchCache can improve application response time and reduce WAN traffic. Cached content can either be distributed acr

6. What must you do if you have a static ip address assigned?
A LAN Router only or a LAN to WAN Router
Verify that they are not within the scope of the dynamically assigned DHCP addresses.
ISATAP Routers within an orginization - 6TO4 routers to transverse the internet - and TEREDO to traverse a NAT devise.
Each of the rule types. For example - the default rules for Executables are: Allow members of the local Administrators group to run all applications - Allow members of the Everyone group to run applications that are located in the Windows folder - Al

7. How do you configure client computers to use a WSUS server as the source for Windows Update?
Modify/Create a GPO
Subtract the number of bits in the mask from 32 bits (255.255.255.255). Take the result (x) and have 2 to the power of the result (2^x). Subtract that final result by 2 and that is the amount of host addresses available.
Internet printing protocol. Used for connecting to printers via web browser.
A way of assigning a staic address based on the mac address. This ensures each time the client receives the same address.

8. What do quota templates do?
Command line equilivant of Server Manager. You can install/remove roles and features on server 2008?
Modify/Create a GPO
They restrict disk space usage for users. If you modify the quota template it applies changes to all folders that the template is assigned.
It enables you to surf the web without leaving a trail in Internet Explorer. This helps prevent anyone else who might be using your computer from seeing where you visited and what you looked at on the web. You can start InPrivate Browsing from the ne

9. What does the max=32000 mean in 'create vdisk file = c: vhd windows 7 vhdfilename.vhd max = 32000'
Netsh set dnsserver. Example: netsh interface ipv4 set dnsserver name="Local Area Connection" source=static address=192.168.0.100
Only Business Track Windows 7 editions (Professional - Enterprise - Ultimate).
It is the max size is expressed in megabytes.
They relay the status on polices to the Security center for NAP to validate the system to use the network.

10. How can you delete route table entries?
One of the tunnels if DirectAccess by using a computer certificate. This tunnel provides access to an intranet Domain Name System (DNS) server and domain controller - allowing the computer to download Group Policy objects and to request authenticatio
On the properties of the DNS server in the DNS manager.
Use the route delete command.
Command-line tool for creating an image file (.iso) of a customized 32-bit or 64-bit version of Windows PE. You can then burn that .iso file to a CD-ROM or DVD-ROM. Oscdimg supports ISO 9660 - Joliet - and Universal Disk Format (UDF) file systems.

11. What do Print permission only allows?
A user to submit a print job to a printer and manage their own print jobs through the "Manage Documents" permission granted to the Creator Owners Group. If you grant a user "Manage Documents" - then they can manage ALL jobs submitted to that printer.
Through a GPO.
A new Microsoft proprietary file system supported in Windows 7 which is intended for flash drives but often called FAT64 - limit of 264 bytes (16 Exabytes).
ISATAP - Teredo and 6to4

12. What is WPA-PSK?
WPA-Personal (uses a preshared key)
Use your computer's zone ID at the end of the destination address. The zone ID of an IPV6 address is locally significant.
You will be prompted to reconnect online. To disable offline mode - select it from the Tools menu.
Restrict the share permissions of the DFS root share.

13. What needs to be enabled for smart card logon?
EAP authentication needs to be enabled for remote access authentication (dial up - VPN - wireless) -.
Run: Cscript slmgr.vbs /dl
Assign a ipsec policy to all computers - verify the computers can manually authenticate. Assign a client respond only IPSEC policy to the computers. Also either the request server or the security server need IPSEC polices assigned.
Scan through the %WinDir%WindowsUpdate.log (ie. C:WindowsWindowsUpdate.log) file.

14. What is a WSUS server?
WIndows Update Server
Is a command-line tool for managing BCD stores. It can be used for a variety of purposes - including creating new stores - modifying existing stores - adding boot menu options - and so on. BCDEdit serves essentially the same purpose as Bootcfg.exe on
Credentials - such as user names and passwords that you use to log on to websites or other computers on a network. By storing your credentials - Windows can automatically log you on to websites or other computers. Credentials are saved in special fol
You create an answer file and place it on removable media. By default - Windows Setup will search the root directory of all removable media for an answer file called Autounattend.xml.

15. How do you decrease zone transfer traffic?
Increase the SOA refresh interval parameter.
Through Group Policy at Computer configuration | Administrative Templates | Network | Offline Files | Enable Transparent Caching.
So you can use a system management solution - such as Microsoft System Center Configuration Manager 2007 - to deliver the database to multiple computers and then use the SDBInst.exe command-line tool to install the database. The SDBInst command-line
For example - you can create rules based on the publisher attribute that is persistent through updates - or you can create rules for a specific version of a file.

16. What does Diskpart.exe do?
Can be used to create virtual hard disks
Yes - it can be modified to apply to a network location.
Hovering over a taskbar icon shows thumbnail of that program. Hovering over the thumbnail shows a preview of that program in full view. Aero Peek also refers to the "Show desktop" button to the far right of the new taskbar.
The Default Programs Control Panel applet

17. What is IPsec ESP tunnel?
Use it to generate an EFS user certificate
It sees if your PC is ready for Windows 7. It scans your hardware - devices - and installed programs for known compatibility issues - gives you guidance on how to resolve potential issues found - and recommends what to do before you upgrade.
No they are disabled
One of the tunnels if DirectAccess by using both a computer certificate and user credentials. This tunnel authenticates the user and provides access to intranet resources and application servers.

18. You cannot delete an individual restore point - but you can either delete all restore points or all but the most recent restore point. Deleting restore points temporarily frees up disk space. As new restore points are created - disk space will be use
Client needs Remote Desktop Connection 6.0 or above - Client must use an os that supports CredSSP (Credential Security Support Providoer) - The terminal server must user windoes 2008 and above.
Run Disk Cleanup and click Clean up system files. If you are prompted for an administrator password or confirmation - type the password or provide confirmation. Click the More Options tab - under System Restore and Shadow Copies - click Clean up. In
It insert drivers into the Windows Driver Store so that users can add the associated PNP hardware without having to provide the driver or administrator credentials
At the volume level - not the drive level.

19. What do wireless access point need to be configured with to to preform 802.1x authentication?
vssadmin.exe. This can view previous version files as well.
A text-mode command interpreter that enables you to manage objects (disks - partitions - or volumes) by using scripts or direct input at a command prompt.
They must be configured with the ip addresses of the radius server.
Windows PE and Windows.old.

20. What should you modify of the NAP Agent client service if the computer needs to prove health status?
Configure the primary zone to transfer to only DNS servers listed on the names server tab or by ip address.
It is the max size is expressed in megabytes.
Modify the service startup to automatic and also enable the proper NAP enforcement client (DHCP - EAP - RDGATEWAY - IPSEC).Configured for manual start by default.
Use the Programs and Features Control Panel applet to

21. What is Touch UI?
Yes
Windows Aero was revised to be more touch-friendly.
It can enable a windows feature on an offline image with the /Enable-Feature option
Configure the primary zone to transfer to only DNS servers listed on the names server tab or by ip address.

22. How does AppLocker reduce administrative overhead and help administrators control how users can access and use files - such as executable files - scripts - Windows Installer files - and DLLs?
Distributed Cache mode. In this mode - local Windows 7 clients keep a copy of the content and make it available to other authorized clients that request the same data. This eliminates the need to have a server in the branch office. However - unlike H
By using the dnscmd /zoneexport command.
wbadmin.exe. This can backup critical files.
It contains new capabilities and extensions that you can: Define rules based on file attributes - Create exceptions to rules - Import and export rules - and use audit-only mode.

23. How do you need to configure the NAP enforecment points if using in conjenction with NPS?
Clients establish an IPsec tunnel for the IPv6 traffic to the DirectAccess server - which acts as a gateway to the intranet. The DirectAccess client establishes two IPsec tunnels: Psec Encapsulating Security Payload (ESP) tunnel and IPsec ESP tunnel.
Configure the enforcement points as RADIUS clients.
IPSEC
8 (bits 57 - 64) /64 Allows for 256 subnets in each site.

24. What is the RACAgent?
Conditional forward
A scheduled task that runs by default collecting information for the Reliability monitor. If disabled it must reenabled manually from the task scheduler mmc snapin.
Can be configured through a GPO
IN the WindowsUpdateClient log in the system log portion of event viewer.

25. What does Aero require?
Vista SP1 and Server 2008 and above.
A WDDM driver for the graphics card and a Windows Experience index of 3.0 or greater.
Schedule reports - monitor attempt to save unauthorized files - and generate reports instantly.
Restrict when a child can logon to a computer.

26. How do you review files in the Offline Files Cache?
Create persistent connections to computers with POWERSHELL
A OOBE ready and will be booted into Windows Welcome
A network policy server. It is microsofts implementation of RADIUS server and replaces the IAS (internet authentication service) from windows 2003.
Use SYNC Center

27. How do you add the Windows 7 VHD to the boot choices menu?
Use the BCDEDIT.EXE command
A CONFIG.XML file
By creating or modifying a wireless connection in Network and Sharing Center.
They must be configured with the ip addresses of the radius server.

28. What event viewer log is the Radius server (NPS) logs stored?
Delegate permission by configuring the dacl of the zone file.
The local security logs.
Backups of the full system including all critical volumes (volumes that contain operating system state).
A new Microsoft proprietary file system supported in Windows 7 which is intended for flash drives but often called FAT64 - limit of 264 bytes (16 Exabytes).

29. How do you set a DNS server to a cache only DNS server?
Use your computer's zone ID at the end of the destination address. The zone ID of an IPV6 address is locally significant.
Delete all the zone files or reinstall the DNS service.
8 (bits 57 - 64) /64 Allows for 256 subnets in each site.
Boot into Windows Vista to initiate a direct upgrade to Windows 7 - insert the Windows 7 setup DVD - run SETUP.EXE and choose the Upgrade option. Do not boot directly to the setup DVD.

30. What do NAP clients do?
They relay the status on polices to the Security center for NAP to validate the system to use the network.
They are written in XML and be created using the Windows System Image Manager or a text editor like notepad.
Streamline and simplify user state migration during large deployments of Windows Vista and Windows 7 operating systems. USMT captures user accounts - user files - operating system settings - and application settings - and then migrates them to a new
So the downstream servers can recieve its approved updates via parent server. This allows multiple points of deployment. Downstream servers also can be delegated the permission to approve their own updates

31. How do you export the DNS zone to a text file?
The first time a user opens a file in a shared folder - Windows 7 reads the file from the server and then stores it in a cache on the computer's hard disk drive. The second and subsequent times a user reads the same file - Windows 7 retrieves the cac
Use the Import Foreign Disk option on the target computer
For example - you can create rules based on the publisher attribute that is persistent through updates - or you can create rules for a specific version of a file.
By using the dnscmd /zoneexport command.

32. How do you remove a resource record from a zone file?
Boot into Windows Vista to initiate a direct upgrade to Windows 7 - insert the Windows 7 setup DVD - run SETUP.EXE and choose the Upgrade option. Do not boot directly to the setup DVD.
Use dnscmd /recorddelete
By unbinding the DHCP protocol from the nic attached to the subnet.
From the Network Policy Access Services role in system manager.

33. What does the NEW-PSSESSION powershell applet do?
Use the "Connect to a Workplace" option
A network location.
Writes changes to a mounted WIM file - DISM /UNMOUNT-WIM /DISCARD will roll the changes back
Create persistent connections to computers with POWERSHELL

34. What does PNPUTIL.EXE do?
Yes
It insert drivers into the Windows Driver Store so that users can add the associated PNP hardware without having to provide the driver or administrator credentials
The system will shut down. The next time you start this system (after cloning it) - it will install with the settings in the XML file. The Computer Name will be automatically generated.
It operates by deploying a computer that is running Windows Server 2008 R2 as a host in the branch office. Clients are configured with the fully qualified domain name of the host computer so that they can retrieve content from the Hosted Cache - when

35. What does "Create System Repair Disk" option do?
Windows 7 Ultimate.
Creates a bootable CD that runs the Windows Recovery Environment (WRE)
Use IPCONFIG or Status Details for the Network Connection.
First the local link address sends a router discovery packet (Router Solicitation message). If the router request is received then a Public address corrosponding to the global or unique local address prefix in the message.

36. What can you use the User State Migration Tools (USMT) for?
Divide up a large WIM file into multiple smaller .SWM files
Streamline and simplify user state migration during large deployments of Windows Vista and Windows 7 operating systems. USMT captures user accounts - user files - operating system settings - and application settings - and then migrates them to a new
You will need to run "Startup Repair" from within the Windows Recovery Environment (WRE)
Certain firewall rules configured for the Peer Discovery and Content Retrieval.

37. What port does RDP use?
Installing and imaging on hardware agnostic systems as long as the processor architecture is the same (32 or 64 bit)
Command line equilivant of Server Manager. You can install/remove roles and features on server 2008?
Clients establish an IPsec tunnel for the IPv6 traffic to the DirectAccess server - which acts as a gateway to the intranet. The DirectAccess client establishes two IPsec tunnels: Psec Encapsulating Security Payload (ESP) tunnel and IPsec ESP tunnel.
3389

38. Can the Application Compatibility Kit can also search and report on the applications installed on a Windows 7 computer?
EAP authentication needs to be enabled for remote access authentication (dial up - VPN - wireless) -.
It which enables content from file and Web servers on a wide area network (WAN) to be cached on computers at a local branch office. BranchCache can improve application response time and reduce WAN traffic. Cached content can either be distributed acr
Is a command-line tool for managing BCD stores. It can be used for a variety of purposes - including creating new stores - modifying existing stores - adding boot menu options - and so on. BCDEdit serves essentially the same purpose as Bootcfg.exe on
Yes

39. What should you do to provide redundancy in DNS dynamic updates?
The first time a user opens a file in a shared folder - Windows 7 reads the file from the server and then stores it in a cache on the computer's hard disk drive. The second and subsequent times a user reads the same file - Windows 7 retrieves the cac
Use AD integrated zones so the clients can update to more than one DNS server.
Install Windows Installer Packages (.MSI) files. You can script the installation.
Cannot be in different domains

40. If you wanted to encrypt the connection between a client PC and the WSUS server what would you use?
SSL
WINRM QUICKCONFIG.
Use the route delete command.
They are designed to provide concise and impartial information about the content in computer and video games so consumers - especially parents - can make an informed purchase decision. ESRB ratings have two equal parts: rating symbols suggest age app

41. What does Scanstate /GENMIGXML do?
It governs remote access and a user must meet the conditions of at least one of the policies.
It create a report of which files will be migrated
It backs up digitally identities to a password protected file.
Divide up a large WIM file into multiple smaller .SWM files

42. How can non Microsoft PCs connect to print services?
Print services for unix can be configured to share out with the LPD (Line Printer Daemon) and clients send print jobs to LPD using LPR (Line printer remote) client software.
Windows Vista - Window 7 and Server 2008.
8 (bits 57 - 64) /64 Allows for 256 subnets in each site.
On a core server

43. The print management console can be configured to _____________.
A CONFIG.XML file
It makes it easy to share your libraries and printers on a home network. You can share pictures - music - videos - documents - and printers with other people in your homegroup. The homegroup is protected with a password - and you'll always be able to
Send email notifications
A suite of tools that allow administrators to understand - control - and manage the quantity and types of data stored on the servers.

44. What port uses PPTP uses?
Take the ip address and use the AND command on the calculator to AND the ip address and the subnet. NOTE: AND each octet separately. Then AND the gateway and the subnet. If the AND results are the same you are on the same subnet.
Internet printing protocol. Used for connecting to printers via web browser.
1723
Client needs Remote Desktop Connection 6.0 or above - Client must use an os that supports CredSSP (Credential Security Support Providoer) - The terminal server must user windoes 2008 and above.

45. What is a NPS server?
A tool for controlling the types of content that your computer can access on the Internet. After you turn on Content Advisor - only rated content that meets or exceeds your criteria can be viewed. You can adjust the settings to suit your preferences.
Restrict the share permissions of the DFS root share.
4 (bits 49 - 52) /52 Allows for 16 regions.
A network policy server. It is microsofts implementation of RADIUS server and replaces the IAS (internet authentication service) from windows 2003.

46. What is Optimize for Consistency polling mode do?
The DFS service attempts to keep the domain based namespace highly consistent by polling the pcd emulator after the namespace changes. This bypasses the needing to wait for the ad replication to update the namespace object. This can increase load on
A LAN Router only or a LAN to WAN Router
IPsec to authenticate both the computer and user - allowing IT to manage the computer before the user logs on. Optionally - you can require a smart card for user authentication. It also leverages IPsec to provide encryption for communications across
Delete all the zone files or reinstall the DNS service.

47. What can In-Private Browsing not display?
Suggested Sites
IPV4 and IPV6
The DFS service attempts to keep the domain based namespace highly consistent by polling the pcd emulator after the namespace changes. This bypasses the needing to wait for the ad replication to update the namespace object. This can increase load on
Devices and Printers Control Panel applet has a

48. What is the command line version of windows server backup?
A network policy server. It is microsofts implementation of RADIUS server and replaces the IAS (internet authentication service) from windows 2003.
Modify the service startup to automatic and also enable the proper NAP enforcement client (DHCP - EAP - RDGATEWAY - IPSEC).Configured for manual start by default.
wbadmin.exe. This can backup critical files.
Use SYNC Center

49. What does WinRS do?
Use SYNC Center
Pool Active Directory.
Some information—such as cookies and temporary Internet files—so that the webpages you visit will work correctly. However - at the end of your InPrivate Browsing session - this information is discarded.
It lets you launch process on a remote machine via command line. Example: winrs -r:(remotehost) ipconfig /all

50. How do you configure IPSEC?
Se a capture filter based on the mac address of the problem PC.
A LAN Router only or a LAN to WAN Router
Assign a ipsec policy to all computers - verify the computers can manually authenticate. Assign a client respond only IPSEC policy to the computers. Also either the request server or the security server need IPSEC polices assigned.
Enterprise Admins