Test your basic knowledge |

MCTS

Subjects : certifications, mcts, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. What service has to be started for Applocker to work?
The Application Identity Service
Default Programs Control Panel applet
No
Windows 7 Professional.

2. What should you do if a host file is missing?
You add it back to a DNS zone - clear the server DNS cache and clients DNS cache.
Each of the rule types. For example - the default rules for Executables are: Allow members of the local Administrators group to run all applications - Allow members of the Everyone group to run applications that are located in the Windows folder - Al
SSL
Who can shutdown a computer

3. What do RRAS/NPS policys govern?
It governs remote access and a user must meet the conditions of at least one of the policies.
Installing and imaging on hardware agnostic systems as long as the processor architecture is the same (32 or 64 bit)
Install Windows Installer Packages (.MSI) files. You can script the installation.
Configure aging and scavenging.

4. How do you manage EFS from the command line?
Issue a recovery agent certificate to a user and then import that certificate into a GPO that applies to the computer where that user will be allowed to recover any EFS encrypted files. EFS Data recovery agents are optional
Use the Cipher.exe command line tool.
Use the net sh command to configure the proper ports for remote management.
Sent across the network

5. How do you route IPV6 traffic on your private network?
Client needs Remote Desktop Connection 6.0 or above - Client must use an os that supports CredSSP (Credential Security Support Providoer) - The terminal server must user windoes 2008 and above.
In the registry. To bind to another computer remotly the remote registry service needs to run on the target PC.
Use IPV6 Unique Local Addresses.
Clicking and dragging a window to the right or left side of the desktop causes the window to fill the respective half of the screen. Snapping a window to the top of the desktop maximizes it. Resizing a window to touch the top or bottom edge of the sc

6. How do you restore individual files?
A scheduled task that runs by default collecting information for the Reliability monitor. If disabled it must reenabled manually from the task scheduler mmc snapin.
A text-mode command interpreter that enables you to manage objects (disks - partitions - or volumes) by using scripts or direct input at a command prompt.
Either from wbadmin or windows server backup.
They are in the first 48 bits /48

7. How do you reload an active directory integrated zone from a ad database?
Increase the SOA refresh interval parameter.
Run: Cscript slmgr.vbs /dl
Us edit dnscmd /zoneupdatefromdns command.
Adds a file based zone

8. Why would a secondary DNS server stop responding to client queries?
Schedule reports - monitor attempt to save unauthorized files - and generate reports instantly.
This happens because the zone records expire. This occurs because the secondary zone has not successfully zone transferred before the "Expires After" SOA.
They must be configured with the ip addresses of the radius server.
Modify the service startup to automatic and also enable the proper NAP enforcement client (DHCP - EAP - RDGATEWAY - IPSEC).Configured for manual start by default.

9. What will happen if click on a hyperlink when you are viewing a web page offline in Internet Explorer?
Use your computer's zone ID at the end of the destination address. The zone ID of an IPV6 address is locally significant.
ISATAP Routers within an orginization - 6TO4 routers to transverse the internet - and TEREDO to traverse a NAT devise.
A way of assigning a staic address based on the mac address. This ensures each time the client receives the same address.
You will be prompted to reconnect online. To disable offline mode - select it from the Tools menu.

10. What are the two primary offline scenarios enabled in USMT 4.0?
In the registry. To bind to another computer remotly the remote registry service needs to run on the target PC.
It can can forward requests from DHCP clients for ip addresses to a remote DHCP server.
Windows PE and Windows.old.
Vista SP1 and Server 2008 and above.

11. What does the MigUser.xml file do?
Specify this file with both the ScanState and LoadState commands to migrate user folders - files - and file types to computers running Windows Vista or Windows 7.
Credentials - such as user names and passwords that you use to log on to websites or other computers on a network. By storing your credentials - Windows can automatically log you on to websites or other computers. Credentials are saved in special fol
If you are logged in as an administrator you can shrink an existing partition or volume to create unallocated disk space - from which you can create a new partition or volume. You can shrink a volume even on a Basic Disk.
You can allow by adding the device vendor's GUID to the allow list in a GPO.

12. What does the Resource Monitor display?
Which processes currently consume a resource like processor utilization.
Also known as root scalability mode. Allows organizations with more than 16 namespace servers use consistency mode. They poll the nearest dc every hour instead of the pdc emulator. This reduces network traffic to the pdc emulator but clients might ha
Delete all the zone files or reinstall the DNS service.
System Restore Points as well as Previous Versions of Files (configured through the System applet).

13. What is Aero Peek?
It can be used to configure an unattended install of Windows 7. The answer file is now an XML file instead of an INF file. You should to use Windows System Image Manager to create the XML file. To use this XML file - copy it to c:windowssystem32syspr
Configure a GPO to modify the computers location to look for updates.
Hovering over a taskbar icon shows thumbnail of that program. Hovering over the thumbnail shows a preview of that program in full view. Aero Peek also refers to the "Show desktop" button to the far right of the new taskbar.
The local security logs.

14. What is File Server Resource Manager?
It create a report of which files will be migrated
Configure the enforcement points as RADIUS clients.
Streamline and simplify user state migration during large deployments of Windows Vista and Windows 7 operating systems. USMT captures user accounts - user files - operating system settings - and application settings - and then migrates them to a new
A suite of tools that allow administrators to understand - control - and manage the quantity and types of data stored on the servers.

15. What should you do if you receive warnings that your virtual memory is low?
Increase the minimum size of your paging file. Windows sets the initial minimum size of the paging file equal to the amount of random access memory (RAM) installed on your computer plus 300 megabytes (MB) - and the maximum size equal to three times t
Migrates EFS encrypted files?
They relay the status on polices to the Security center for NAP to validate the system to use the network.
It lets you launch process on a remote machine via command line. Example: winrs -r:(remotehost) ipconfig /all

16. What does DirectAccess uses to authenticate?
Some information—such as cookies and temporary Internet files—so that the webpages you visit will work correctly. However - at the end of your InPrivate Browsing session - this information is discarded.
To deploy the policy and understand its impact before enforcing it.
IPsec to authenticate both the computer and user - allowing IT to manage the computer before the user logs on. Optionally - you can require a smart card for user authentication. It also leverages IPsec to provide encryption for communications across
A roecord to indicate the smtp server.

17. What is Aero Snap?
Each of the rule types. For example - the default rules for Executables are: Allow members of the local Administrators group to run all applications - Allow members of the Everyone group to run applications that are located in the Windows folder - Al
By using the dnscmd /zoneexport command.
Clicking and dragging a window to the right or left side of the desktop causes the window to fill the respective half of the screen. Snapping a window to the top of the desktop maximizes it. Resizing a window to touch the top or bottom edge of the sc
You setup one the DHCP server with the same option settings and non-overlapping scopes. Make sure to duplicate any reservations.

18. What is User Account Control (UAC)?
It is a security component that enables users to perform common tasks as non-administrators - called standard users in Windows 7 - and as administrators without having to switch users - log off - or use Run As.
Cannot be in different domains
4 (bits 49 - 52) /52 Allows for 16 regions.
DHCP server cannot assign an ip address

19. Why would you add additional drivers for the various operating systems in your organization that will be connecting to the shared printer when sharing a printer?
Using wecutil -cs in an xml file.
Windows 7 Enterprise and Ultimate Editions
To will ensure the clients download the appropriate printer driver.
It improves performance

20. What preforms authentication at a computer level for vpn?
The local security logs.
L2TP/IPSEC with EAP-TLS.
Yes - This involves picking the user certificate of the user you are sharing the file with. If that user does not already have a preinstalled certificate - then have them logon and encrypt a file for the first time and EFS will autogenerate a new cer
IPV4 and IPV6

21. What requirements must your system must meet to use BranchCache?
The Deployment Image Servicing and Management (DISM) tool replaces the pkgmgr - PEImg - and IntlConfg tools that are being retired in Windows 7. DISM provides a single centralized tool for performing all of the functions of these three tools in a mor
Pool Active Directory.
A new Microsoft proprietary file system supported in Windows 7 which is intended for flash drives but often called FAT64 - limit of 264 bytes (16 Exabytes).
Client computers must be running Windows 7 - with the BranchCache feature enabled. Web servers file servers must be running Windows Server 2008 R2 - with the BranchCache feature enabled.

22. What does AppLocker allows you to generate default rules for?
Each of the rule types. For example - the default rules for Executables are: Allow members of the local Administrators group to run all applications - Allow members of the Everyone group to run applications that are located in the Windows folder - Al
IPSEC
One of the tunnels if DirectAccess by using a computer certificate. This tunnel provides access to an intranet Domain Name System (DNS) server and domain controller - allowing the computer to download Group Policy objects and to request authenticatio
Use Safe Mode and then roll back the driver if it was recently updated.

23. What is a HOSTS file?
Use the Programs and Features Control Panel applet to
Enable remote management on a computer and create the proper inbound rules on the advanced firewall.
Uncheck IPV6 from the network properties.
A file that can be used to perform FQDN name resolution in the absence of a DNS server.

24. What does Reliability Monitor display?
Problem history but also application installation history.
No
Specified the version identifer of the back to recover in MM?DD/YYYY-HH:MM format. If the version is unknown wdadmin will get the version.
Promiscuous mode allows you to monitor another machine without installing network monitor on the PC you are trying to monitor.

25. What OSs are all Windows Games installed on?
A network location.
Use IPV6 Unique Local Addresses.
Windows 7 Enterprise and Ultimate Editions
By either using WSUS management console (server side targeting) or GPO (client side targeting).

26. What does PNPUTIL.EXE do?
It is submitted to Microsoft for "device signing" to ensure the driver was adequately tested and will not affect the integrity of the operating system. Critical files are digitally signed so that any changes to these may be easily detected. However n
Drop both inbound and outbound traffic
Create a customized shell
It insert drivers into the Windows Driver Store so that users can add the associated PNP hardware without having to provide the driver or administrator credentials

27. The WSUS server and remote SQL server _____________.
The import and export affects the entire policy. For example - if you export a policy - all of the rules from all of the rule collections are exported - including the enforcement settings for the rule collections. If you import a policy - the existin
WECUTIL QC
Cannot be in different domains
Run scripts

28. What type of router can RRAS be configured as?
A LAN Router only or a LAN to WAN Router
Delete all the zone files or reinstall the DNS service.
Run Disk Cleanup and click Clean up system files. If you are prompted for an administrator password or confirmation - type the password or provide confirmation. Click the More Options tab - under System Restore and Shadow Copies - click Clean up. In
You add it back to a DNS zone - clear the server DNS cache and clients DNS cache.

29. What is the command needed In order for ScanState and LoadState to use any of the migration .xml files?
Add an AD integrated zone
It lets you launch process on a remote machine via command line. Example: winrs -r:(remotehost) ipconfig /all
You need to specify the files on both command lines using the /i option. Unlike previous versions of USMT - the .xml files are not copied to the store. Because ScanState and LoadState need the .xml files to control the migration - you should specify
BCD boot file creation and repair tool. The bcdboot.exe command-line tool is used to copy critical boot files to the system partition and to create a new system BCD store.

30. What firewall profile is configured for AD domain computers?
You setup one the DHCP server with the same option settings and non-overlapping scopes. Make sure to duplicate any reservations.
By either using WSUS management console (server side targeting) or GPO (client side targeting).
Run: Cscript slmgr.vbs /dl
The domain profile not the public or private.

31. How do you test the ip connectivity on IPV6?
Use WPA with AES encryption. WPA-Personal requires a preshared key and WPA-Enterprise uses Radius Authentication.
Ping the Link Local Address (FE80 Address)
Enforce IPSEC on the network
Updates the master boot code for hard disk partitions to switch between BOOTMGR and NTLDR. You can use this tool to restore the boot sector on your computer. This tool replaces FixFAT and FixNTFS.

32. How do you create a custom Windows PE image that supports windows scripting host?
Modify the PE image using DISM by adding the WINPE-Scripting package to BOOT.WIM
You can add more space to existing primary partitions and logical drives by extending them into adjacent unallocated space on the same disk. To extend a basic volume - it must be raw or formatted with the NTFS file system.
Yes - Removable Storage Access policies within a GPO can be used to restrict user's access to devices like USB drives - CDDVD drives - Floppy Disks - Tape Drives - etc.
8 (bits 57 - 64) /64 Allows for 256 subnets in each site.

33. What is DiskPart?
A text-mode command interpreter that enables you to manage objects (disks - partitions - or volumes) by using scripts or direct input at a command prompt.
It enables you to surf the web without leaving a trail in Internet Explorer. This helps prevent anyone else who might be using your computer from seeing where you visited and what you looked at on the web. You can start InPrivate Browsing from the ne
Modifies the installation of a Windows Installer Package (.MSI) and can be invoked with MSIEXEC.EXE
ISATAP - Teredo and 6to4

34. What is the default Install image from a Windows 7 Setup DVD?
Yes - Removable Storage Access policies within a GPO can be used to restrict user's access to devices like USB drives - CDDVD drives - Floppy Disks - Tape Drives - etc.
A OOBE ready and will be booted into Windows Welcome
Shaking (quickly dragging back and forth) a window minimizes all other windows. Shaking it again brings them back.
It is the Microsoft SMB client for accessing shared network resources

35. What does the WSUS DB Store?
The import and export affects the entire policy. For example - if you export a policy - all of the rules from all of the rule collections are exported - including the enforcement settings for the rule collections. If you import a policy - the existin
Use the Import Foreign Disk option on the target computer
WSUS server configuration information - Metadata describing what each update is for - and general information about clients - updates and interaction.
It backs up digitally identities to a password protected file.

36. NAP can be configured to ____________.
Updates the master boot code for hard disk partitions to switch between BOOTMGR and NTLDR. You can use this tool to restore the boot sector on your computer. This tool replaces FixFAT and FixNTFS.
Enforce IPSEC on the network
Comes with the Windows Automated Installation Kit (WAIK)
It backs up digitally identities to a password protected file.

37. How can you can upgrade an offline image's Windows 7 edition?
By using the DISM command with a /Set-Edition option: Example: DISM /IMAGE:C:SAMPLE.WIM /Set-Edition:Ultimate
Use the Programs and Features Control Panel applet to
By running the Update Status summary report.
Schedule reports - monitor attempt to save unauthorized files - and generate reports instantly.

38. Where is scavaging configured?
Problem history but also application installation history.
On the properties of the DNS server in the DNS manager.
They can place quotas on folders/volumes - activity screen files - and generate comprehensive storage reports. This assists in not only monitoring existing resource but helping on future planning.
A file that is loaded when a DNS server starts up and populate the root hints.

39. How do you change the ReadyBoost configuration of a flash drive?
EARLY CHILDHOOD - EVERYONE - EVERYONE 10+ - TEEN - MATURE - ADULTS ONLY - RATING PENDING
It operates by deploying a computer that is running Windows Server 2008 R2 as a host in the branch office. Clients are configured with the fully qualified domain name of the host computer so that they can retrieve content from the Hosted Cache - when
Plug in the drive and then select properties of the drive. You can make changes through the ReadyBoost tab.
Boot into Windows Vista to initiate a direct upgrade to Windows 7 - insert the Windows 7 setup DVD - run SETUP.EXE and choose the Upgrade option. Do not boot directly to the setup DVD.

40. What is Bcdboot?
By the RRAS manager or from the command line. For the subnet you can either use the / command or the octet subnet. Example: Route -p add 192.168.1.0/24 192.168.1.1
A new feature in Windows 7 and Windows Server 2008 R2 that replaces the Software Restriction Policies (SRP) feature. One of the advantages of Applocker rules over SRP is you can assign a rule to a security group or an individual user.
BCD boot file creation and repair tool. The bcdboot.exe command-line tool is used to copy critical boot files to the system partition and to create a new system BCD store.
It can enable a windows feature on an offline image with the /Enable-Feature option

41. What does System Protection cover?
System Restore Points as well as Previous Versions of Files (configured through the System applet).
Use the DHCPv6 to obtain both IPV6 addresses and additional configuration settings.
A new feature for Offline Files & Folders. Prior to Windows 7 - to open a file across a slow network - client computers always retrieved the file from the server - even if the client computer had recently read the file. With Windows 7 transparent cac
Sett up a priority for the preferred smtp server.

42. What does Removing Modify NTFS permission (not explicitly denying) do?
Configure a firewall rule to the specific port and block all connections.
Encapsulating Security payload protocol used for encryption the packets created by the AH.
Increase the SOA refresh interval parameter.
It will prevent a user from deleting files in a folder. Granting Modify permission to the Creator Owners Group will allow users to delete the files they create but not the files of other users.

43. How do you calculate the number of host addresses in a give subnet?
Clients establish an IPsec tunnel for the IPv6 traffic to the DirectAccess server - which acts as a gateway to the intranet. The DirectAccess client establishes two IPsec tunnels: Psec Encapsulating Security Payload (ESP) tunnel and IPsec ESP tunnel.
By creating or modifying a wireless connection in Network and Sharing Center.
A way of assigning a staic address based on the mac address. This ensures each time the client receives the same address.
Subtract the number of bits in the mask from 32 bits (255.255.255.255). Take the result (x) and have 2 to the power of the result (2^x). Subtract that final result by 2 and that is the amount of host addresses available.

44. ________________ can be replicated through Ad replication.
Can be used to create virtual hard disks
Conditional forward
It improves performance
8 (bits 57 - 64) /64 Allows for 256 subnets in each site.

45. How do you review files in the Offline Files Cache?
Windows PE and Windows.old.
Anew vpn protocol that uses SSL (port 443) for encryption.
Use SYNC Center
Use the net sh command to configure the proper ports for remote management.

46. How do you initiate a zone transfer?
Use dnscmd /zonerefresh.
They need to be configured us use 802.1x RADIUS authentication
Adds a file based zone
Promiscuous mode allows you to monitor another machine without installing network monitor on the PC you are trying to monitor.

47. Does the Advanced Firewall already has a predefined Homegroup inbound rule?
By caching reads to remote files over a slow network in the Offline Files (CSC) cache. Subsequent reads to the same file are then satisfied from the client (cache) after verifying the integrity of the cached copy.
Yes - it can be modified to apply to a network location.
WINRM QUICKCONFIG.
EAP authentication needs to be enabled for remote access authentication (dial up - VPN - wireless) -.

48. How can you modify event viewer from being filled up with the printer related events?
A CA users trust or they will get error messages when trying to securely access a web site. They can avoid the error by installing the CA certificate to the Trusted Root Certificate Store.
The latest Vista Service Pack
Turn off the Log Spooler event on a print server.
IN the WindowsUpdateClient log in the system log portion of event viewer.

49. How can you use ImageX to apply a WIM Image directly to a VHD file?
Clicking and dragging a window to the right or left side of the desktop causes the window to fill the respective half of the screen. Snapping a window to the top of the desktop maximizes it. Resizing a window to touch the top or bottom edge of the sc
dynamic drives
To perform very fast searches of the most common files on your computer. The easiest way to add something to the index is to include a folder in a library. When you do that - the content in that folder is automatically indexed.
ImageX utility can extract the required operating system edition directly to the attached VHD file in Windows 7.

50. What does the MigDocs.xml file do?
It backs up digitally identities to a password protected file.
3389
Specify this file with both the ScanState and LoadState tools to migrate all user folders and files that resides on the root of any drive and in the Users directory. However - it does not find and migrate any application data - program files - or any
Increase the minimum size of your paging file. Windows sets the initial minimum size of the paging file equal to the amount of random access memory (RAM) installed on your computer plus 300 megabytes (MB) - and the maximum size equal to three times t