SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
MCTS: Monitoring Computers
Start Test
Study First
Subjects
:
certifications
,
mcts
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. When you create a custom view - Event Viewer saves it within the ______ node so that you can quickly view the same set of events.
winrm quickconfig
Custom Views
DiagnosticsPerformanceMonitoring Tools
Latest Report
2. Event forwarding uses ______ or ______ to send events from a forwarding computer to a collecting computer.
NMCap /network * /capture "DNS" /file filename.cap
Windows Remote Management - Windows Event Collector
Hypertext Transfer Protocol (HTTP) or HTTPS (Hypertext Transfer Protocol Secure)
Active Directory Diagnostics - System Performance - System Diagnostics - Wireless Diagnostics
3. Because the forwarding computer must have HTTP and possibly HTTPS available - you can attempt to connect to it from the collecting computer by using Windows Internet Explorer
http://computername:5985 (or https://computername:5986 if you are using HTTPS)
wecutil qc
Start A Program - Send An E-mail - Display A Message
Server Manager
4. Computers that have no errors and no new software installations are considered stable and can achieve the maximum system stability index of ______.
gr
Right-click Data Collector SetsUser Defined - choose New - and then choose Data Collector Set. The Create New Data Collector Set Wizard appears.
winrm quickconfig
10
5. Although you can create data collector sets using the Logman tool - creating them using the Data Collector Sets console is easier. You can then run the data collector set by using the following command:
Custom Views
5985 and 5986
winrm quickconfig -transport:https
logman start "<Data Collector Set>"
6. To trigger a task when an event occurs - follow one of these three procedures:
Collector initiated
gr
winrm quickconfig
Find an example of the event in Event Viewer. - In Task Scheduler - click Create Basic Task in the actions pane. - Use the Schtasks command-line tool from a command prompt or a script.
7. With ______ subscriptions - the forwarding computers contact the collecting computer.
ss - wecutil ss <subscription_name> /cm:custom wecutil ss <subscription_name> /hi:<milliseconds_delay>
Source computer initiated
winrm quickconfig -transport:https
winrm quickconfig
8. You can also use the /inputcapture parameter of NMCap to process an existing capture file.E.g. To read a file named Capture1.cap and write a new capture file containing only HTTP packets - use this command:
NMCap /InputCapture "Capture1.cap" /capture "HTTP" /file "HttpOnlyCapture.cap"
Application - Security - Setup - System - Forwarded Events
Hypertext Transfer Protocol (HTTP) or HTTPS (Hypertext Transfer Protocol Secure)
Find an example of the event in Event Viewer. - In Task Scheduler - click Create Basic Task in the actions pane. - Use the Schtasks command-line tool from a command prompt or a script.
9. To configure Event Forwarding to use HTTPS - create a Windows Firewall exception for TCP port 5986 and run the following command:
winrm quickconfig
winrm quickconfig -transport:https
SCHTASKS /Create /TN EventLog /TR respond.exe /SC ONEVENT /EC System /MO *[System/EventID=177]
Win XP SP2 - Win Srvr 2003 SP1 or 2 - Win Srvr 2003 R2 - Vista - Win 7 - Win Srvr 2008 - and Win Srvr 2008 R2
10. Find an example of the event in Event Viewer. Then - right-click the event and click ______. A wizard will guide you through the process.
Attach Task To This Event
Wireless Diagnostics
NMCap /network * /capture /file filename.cap
Latest Report
11. Event forwarding uses HTTP or HTTPS to send events from a forwarding computer to a collecting computer. Instead of using the standard TCP ports 80 and 443 - HTTP and HTTPS use ports ______ - respectively.
Win XP SP2 - Win Srvr 2003 SP1 or 2 - Win Srvr 2003 R2 - Vista - Win 7 - Win Srvr 2008 - and Win Srvr 2008 R2
winrm enumerate winrm/config/Listener
5985 and 5986
RACAgent.exe
12. This Windows log contains events generated by applications.
Wireless Diagnostics
Application
gr
winrm quickconfig -transport:https
13. This Windows log contains core system events. Other system events are contained with Applications And Services Logs.
winrm enumerate winrm/config/Listener
Find an example of the event in Event Viewer. - In Task Scheduler - click Create Basic Task in the actions pane. - Use the Schtasks command-line tool from a command prompt or a script.
logman start "<Data Collector Set>"
System
14. Check the Applications And Services LogsMicrosoftWindowsEventlog-ForwardingPluginOperational event log and verify that the subscription was created successfully. Event ID 100 indicates a new subscription whereas Event ID ______ indicates a subscripti
103
wecutil qc
Right-click Data Collector SetsUser Defined - choose New - and then choose Data Collector Set. The Create New Data Collector Set Wizard appears.
Forwarded Events
15. Logs processor - disk - memory - and network performance counters and kernel tracing. Use the ______ Data Collector Set when troubleshooting a slow computer or intermittent performance problems.
winrm get winrm/config
System Performance
wecutil qc
Right-click Data Collector SetsUser Defined - choose New - and then choose Data Collector Set. The Create New Data Collector Set Wizard appears.
16. Custom views are filters that can display events from ______.
multiple logs
Windows Remote Management - Windows Event Collector
Performance Monitor
System
17. Microsoft provides ______ - a powerful protocol analyzer - as a free download.
SCHTASKS /Create /TN EventLog /TR respond.exe /SC ONEVENT /EC System /MO *[System/EventID=177]
Network Monitor
Server Manager
network adapter
18. Logs all the info included in the System Performance Data Collector Set - plus detailed system information. Use the ______ Data Collector Set when troubleshooting reliability problems such as problematic hardware - driver failures - or Stop errors (a
Vista - Win 7 - Win Server 2003 R2 - Win Server 2008 - and Win Server 2008 R2
System Diagnostics
Start A Program - Send An E-mail - Display A Message
multiple logs
19. You can open Event Viewer from within ______ by selecting the DiagnosticsEvent Viewer node.
winrm get winrm/config
Server Manager
gr
network adapter
20. To configure a computer running Vista - Win 7 - Win Srvr 2008 - or Win Srvr 2008 R2 to collect events - open a command prompt with administrative privileges. Then - run the following command to configure the Windows Event Collector service:
NMCap /InputCapture "Capture1.cap" /capture "HTTP" /file "HttpOnlyCapture.cap"
When A Specific Event Is Logged
wecutil qc
Active Directory Diagnostics
21. With event forwarding - only these Windows versions can act as forwarding computers:
Find an example of the event in Event Viewer. - In Task Scheduler - click Create Basic Task in the actions pane. - Use the Schtasks command-line tool from a command prompt or a script.
Security
System
Win XP SP2 - Win Srvr 2003 SP1 or 2 - Win Srvr 2003 R2 - Vista - Win 7 - Win Srvr 2008 - and Win Srvr 2008 R2
22. Windows Logs contains five subnodes:
Application - Security - Setup - System - Forwarded Events
Setup
Data Collector Sets
winrm get winrm/config
23. To verify that the forwarding computer has the Windows Remote Management listener properly configured - from an elevated command prompt - run the following command:
Wireless Diagnostics
Application - Security - Setup - System - Forwarded Events
winrm enumerate winrm/config/Listener
When A Specific Event Is Logged
24. In Win Srvr 2008 and Win Srvr 2008 R2 - you can also simply select the ______ node in the console tree of Event Viewer to confiture the collecting computer.
SCHTASKS /Create /TN EventLog /TR respond.exe /SC ONEVENT /EC System /MO *[System/EventID=177]
Network Monitor
event forwarding
Subscriptions
25. After using a Data Collector Set to gather information and then stopping the Data Collector Set - you can view a summary by right-clicking the Data Collector Set and then choosing ______.
ds
multiple logs
Latest Report
Collector initiated - Source computer initiated
26. This Windows log contains events forwarded to this computer from other computers.
10
Forwarded Events
Active Directory Diagnostics - System Performance - System Diagnostics - Wireless Diagnostics
Performance Monitor
27. In Task Scheduler - click Create Basic Task in the actions pane. On the Trigger page of the wizard - select ______. Then - specify the Log - Source - and Event ID.
When A Specific Event Is Logged
Security
winrm get winrm/config
winrm quickconfig
28. One of the most useful ways to use Task Scheduler is to launch a task in response to a specific event type that appears in Event Viewer. You can respond to events in three ways:
wecutil qc
Start
ss - wecutil ss <subscription_name> /cm:custom wecutil ss <subscription_name> /hi:<milliseconds_delay>
Start A Program - Send An E-mail - Display A Message
29. The Minimize Bandwidth and Minimize Latency options of Event Subscriptions - both batch a default number of items at a time. You can determine the value of this default by typing the following command at a command prompt:
5985 and 5986
Collector initiated
winrm get winrm/config
event forwarding
30. Present only on computers with wireless capabilities - the ______ Data Collector Set logs the same info as the LAN Diagnostics Data Collector Set - plus info relevant to troubleshooting wireless network connections.
Performance Monitor
Wireless Diagnostics
Hypertext Transfer Protocol (HTTP) or HTTPS (Hypertext Transfer Protocol Secure)
winrm quickconfig -transport:https
31. The wecutil ______ parameter performs the initial configuration required to collect events. If a subscription already exists - the necessary configuration must have already been performed.
Forwarded Events
Network Monitor
qc
Source computer initiated
32. This Windows log contains events generated while installing and updating Windows.
NMCap /network * /capture /file filename.cap
Setup
System
Collector initiated
33. ______ tracks a computer's stability.
Data Collector Sets
Find an example of the event in Event Viewer. - In Task Scheduler - click Create Basic Task in the actions pane. - Use the Schtasks command-line tool from a command prompt or a script.
Ctrl+C
Reliability Monitor
34. ______ graphically shows real-time performance data - including processor utilization - network bandwidth usage - and thousands of other statistics.
Performance Monitor
10
ds
SCHTASKS /Create /TN EventLog /TR respond.exe /SC ONEVENT /EC System /MO *[System/EventID=177]
35. To create a custom Data Collector Set - follow these steps:
Right-click Data Collector SetsUser Defined - choose New - and then choose Data Collector Set. The Create New Data Collector Set Wizard appears.
Collector initiated - Source computer initiated
Collector initiated
qc
36. The wecutil ______ parameter defines subscription configuration. To specify a custom interval for a subscription - run the following commands: ______.
DiagnosticsPerformanceMonitoring Tools
System
ss - wecutil ss <subscription_name> /cm:custom wecutil ss <subscription_name> /hi:<milliseconds_delay>
http://computername:5985 (or https://computername:5986 if you are using HTTPS)
37. To run a file named Respond.exe whenever event 177 is published in the System event log - run the following command:
Windows Remote Management - Windows Event Collector
Subscriptions
Data Collector Sets
SCHTASKS /Create /TN EventLog /TR respond.exe /SC ONEVENT /EC System /MO *[System/EventID=177]
38. To open Reliability Monitor - right-click the ______ node in Server Manager and then click View System Reliability.
DiagnosticsPerformanceMonitoring Tools
Network Monitor
Start A Program - Send An E-mail - Display A Message
wecutil qc
39. You can create two types of subscriptions:
Custom Views
Server Manager
Vista - Win 7 - Win Server 2003 R2 - Win Server 2008 - and Win Server 2008 R2
Collector initiated - Source computer initiated
40. The wecutil ______ parameter deletes a subscription.
Network Monitor
gr
ds
winrm get winrm/config
41. At a command prompt with administrative privileges - run the following command to configure the Windows Remote Management service on the forwarding computer:
Vista - Win 7 - Win Server 2003 R2 - Win Server 2008 - and Win Server 2008 R2
NMCap /network * /capture "DNS" /file filename.cap
winrm quickconfig
Wireless Diagnostics
42. To use a filter capture - type the filter capture in quotation marks after the /capture parameter. For example - the following command captures only DNS traffic:
Subscriptions
winrm enumerate winrm/config/Listener
NMCap /network * /capture "DNS" /file filename.cap
System Diagnostics
43. What command should you run to configure a collecting computer?
wecutil qc
ds
NMCap /InputCapture "Capture1.cap" /capture "HTTP" /file "HttpOnlyCapture.cap"
Win XP SP2 - Win Srvr 2003 SP1 or 2 - Win Srvr 2003 R2 - Vista - Win 7 - Win Srvr 2008 - and Win Srvr 2008 R2
44. ______ gather system information - including configuration settings and performance data - and store it in a data file.
Data Collector Sets
RACAgent.exe
wecutil qc
Subscriptions
45. With ______ - you can send events that match specific criteria to an administrative computer - allowing you to centralize event management.
Vista - Win 7 - Win Server 2003 R2 - Win Server 2008 - and Win Server 2008 R2
Active Directory Diagnostics
Start A Program - Send An E-mail - Display A Message
event forwarding
46. This Windows log contains auditing events that Windows adds when a user accesses or attempts to access a resource that has been configured for auditing.
multiple logs
winrm get winrm/config
Security
Wireless Diagnostics
47. The log files are contained in two subnodes:
gr
Attach Task To This Event
Windows Logs and Applications And Services Logs.
Application - Security - Setup - System - Forwarded Events
48. Using event forwarding requires you to configure both the forwarding and collecting computers. First - you must start the following services on both the forwarding and collecting computer:
Subscriptions
multiple logs
ds
Windows Remote Management - Windows Event Collector
49. Windows Server 2008 R2 includes several built-in Data Collector Sets located at Data Collector SetsSystem:
Active Directory Diagnostics - System Performance - System Diagnostics - Wireless Diagnostics
gr
Hypertext Transfer Protocol (HTTP) or HTTPS (Hypertext Transfer Protocol Secure)
winrm quickconfig
50. To use a Data Collector Set - right-click it - and then choose ______.
wecutil qc
Server Manager
Start A Program - Send An E-mail - Display A Message
Start