Test your basic knowledge |

MSITP

Subjects : certifications, msitp, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. WSSvr1 has Windows SharePoint Services role installed and contains 20 SharePoint sites. You need to optimize performance and ensure that if CPU utilization exceeds 75% - then an equal amount of system resources are allocated to each SharePoint site.
Configure each SharePoint site to use a separate application pool - and then implement Windows System Resource Manager (WSRM)
Configure offline files and enable manual caching
In each satellite office - install a WSUS server and configure the WSUS servers to use the main office WSUS server as an upstream server.
Deploy an additional WSUS server for the remote teachers. Configure the remote teacher's laptops to use the additional WSUS server. Configure the addtional WSUS server to leave the updates on the Microsoft Update Web Site.

2. DFL is Windows Server 2003 and client computers run Vista. DCRMS is a server that holds AD RMS. What should be done to configure AD RMS so users - including Waldo - can protect their data?
1) Enable the Audit object access setting in the Local Security Policy for Srv1. 2) Configure auditing in the Certification Authority snap-in.
dnscmd tool
Create an e-mail account in AD DS for your RMS users.
Install Windows Server Backup and modify the Windows firewall settings

3. There is a file server in each office that contains a shared folder named Data. You need to plan the data availability for the Data folder according to these requirements: if WAN link fails - the files in the Data folder must be available in all of t
Implement a domain-based DFS namespace that uses DFS Replication in a hub and spoke topology
Install the File Server Resource Manager (FSRM) role service on the sales department file server. Configure hard quotas and file screening.
The applications within the VM by using RemoteApp. Create a RemoteApp and Desktop Connection for each VM.
Configure each SharePoint site to use a separate application pool - and then implement Windows System Resource Manager (WSRM)

4. Your AD domain has an OU named Sales OU that contains the user accounts of the Sales department. A new password polity needs to be created for the Sales department that is different from the domain password policy. How is this accomplished?
Configure a server with the Remote Desktop Services role and install Outlook 2003 on the Remote Desktop Services server. Then publish Outlook 2003 as a Remote Desktop Services RemoteApp (RD RemoteApp).
Add all the sales user accounts into a new global security group. Create a new Password Policy Object (PSO) and apply it to the group.
Application to the computer if you need to ensure that the application is installed on the computer before the user logs in.
Windows System Resource Manager (WSRM)

5. An AD LDS instance needs to be replicated from one server to another...
Event Subscriptions
Perform an authoritative restore
The Group Policy Management Console
Service user account for AD LDS

6. SrvA has Remote Desktop Services role installed. You notice that users are consuming more than 40% of CPU resources. You want to prevent them from consuming more than 10% - however - administrators should not be limited.
Implement Windows System Resource Manager (WSRM) and configure user policies
1) Add the branch office admin accounts to teh Group Policy Creator Owners Group. 2) Run the Delegation of Control Wizard and delegate the right to link GPOs for their branch OUs to the branch office admins.
dnscmd dcsrv2.company.com /zoneresettype company.com /dsprimary
Deploy an additional WSUS server for the remote teachers. Configure the remote teacher's laptops to use the additional WSUS server. Configure the addtional WSUS server to leave the updates on the Microsoft Update Web Site.

7. You just dconfigured so that Server1 zone is stored in AD and accept secure dynamic updates. What command should be executed so that Server2 can accept secure dynamic updates?
Event Log Subscriptions
dnscmd dcsrv2.company.com /zoneresettype company.com /dsprimary
Use local roles options within "dsmgmt"
Configure folder redirection

8. If CA PKI needs to support Suite B hashing and encryption algorithms and store keys in AD
The Group Policy Management Console
Then install new Server 2008 R2 Enterprise subordinate CA.
Then use Windows BitLocker Drive Encryption
Raise the DFL to Windows Server 2008 R2.

9. You have a root domain and four child domains. Policy requirements state that all local guest accounts must be renamed and disabled - and all local administrator accounts must be renamed
Implement a GPO for each domain
Encrypting File System (EFS). This can be enabled locally or through a GPO.
Repadmin
The applications within the VM by using RemoteApp. Create a RemoteApp and Desktop Connection for each VM.

10. Need to ensure users receive updated template within five days...
Place the operating system files on one of the RAID 1 array - place the SQL transaction logs on the other RAID 1 array - and place the SQL database files on the RAID 5 array
Create a GPO and link the GPO to the domain then configure the GPO to be enforced
Run the Delegation of Control Wizard on the Staff OU
Registry on users computer needs to be modified

11. When deploying an application using the Group Policy distribution method assign the...
Windows Deployment Services (WDS)
Improve the performance of File Servers
Application to the computer if you need to ensure that the application is installed on the computer before the user logs in.
Prestage the computer account in AD

12. You have three domain controllers that perform a full back up every day. You need a recovery strategy for AD objects that meets these requirements: allows objects in a backup to be compared to objects in the live AD database; minimizes admin effort.
Either implement a DHCP server at the branch office - or configure a "Static Pool" on the RRAS server itself. If deploying a DHCP server at the branch office isn't an option - then once the Remote Access Server role has been deployed you can configur
IIS Manager user account
Install the RSAT tool on their workstation to provide for more efficient network management
You could restore the backup to an alternate location. Then mount the database using the AD Database Mounting Tool (Dsamain.exe)

13. You need a solution that meets policy while minimizing hardware and software costs
Execute the Set-ADServiceAccount cmdlet
Create a new Password Settings Object (PSO) for the IT users.
Enable Windows Remote Management (WinRM) on each server.
Deploy the application via RemoteApp as an .MSI file and enable File Extension Take over.

14. If you want to allow single-label name resolution
Congifure the new Local User and Groups by using Group Policy Preferences option and link the policy to the Branch office site.
Installing Hyper-V on a Server Core installation of Windows Server 2008 R2 Enterprise
Then configure GlobalNames zones on each domain controller.
Execute the Active Directory Diagnostics Data Collector Set and then review the report.

15. What document management solution allows you to keep multiple versions of documents and automatically apply access policies to these documents? You should recommend
Microsoft System Center Data Protection Manager 2010
Deploy a two-node cluster. Connect an external storage subsystem. Configure the external subsystem as a RAID 10 array - and format the array as a GPT disk.
In each satellite office - install a WSUS server and configure the WSUS servers to use the main office WSUS server as an upstream server.
Active Directory Rights Management Services (AD RMS) and Microsoft SharePoint Foundation 2010

16. To ensure that when certain users log on to any client computers in the branch office - they automatically receive the local administrator rights to the computer - and when they log off - they must lose the administrator rights
Event Subscriptions
1) Run net stop ADLDS command 2) Use ntdsutil tool to move db files 3) Run net start ADLDS cmd
Congifure the new Local User and Groups by using Group Policy Preferences option and link the policy to the Branch office site.
Create a GPO and link the GPO to the domain then configure the GPO to be enforced

17. Domain.com's network consists of a Single AD domain. All servers and domain controllers run Windows Server 2008 R2. You need to ensure that you can: track all changes made to AD objects by the recently hired IT consulting firm; Ensure that the audits
Implement Distributed File System Replication (DFSR) on both servers
Add-ADFineGrainedPasswordPolicySubject cmdlet
Loopback Processing - The purpose of the Loopback Processing policy is to prevent usesr policies that currently affect the user from following them to a publicly used or (shared remote desktop) computer. We may indeed in many cases want these policie
Configure an audit policy by editing the default domain policy and configure Event Forwarding

18. An external partner plan requires the following: prevent sensitive documents from being forwarded to untrusted recipients or from being printed; allow users in the external partner organization to access the protected content to which they have been
Establish a Federated Trust between your company and the external partner. Deploy a 2008 R2 server that runs MIcrosoft SharePoint 2010 and that has the Active Directory Rights Management Services (AD MS) role installed.
Install Hyper-V role and convert physical machines into virtual machines
Incoming external trust
Network Policy Server (NPS) and Routing and Remote Access Service (RRAS)

19. Tool to change Directory Services Restore Mode password on Domain Controller...
ntdsutil
Modify the schema of LDSInst1
Create an e-mail account in AD DS for your RMS users
Subnet object needs to be created

20. Minimal FFL needed to deploy an RODC that runs Windows Server 2008 R2...
Dynamically expanding VHD's
Windows Server 2003
AD Domains and Trusts
Implement Windows System Resource Manager (WSRM)

21. Your DFS deployment needs to meet these requirements: minimize the bandwidth required to replicate data; ensure users see only folders to which they have access; ensure users can access the data locally.
Configure an audit policy by editing the default domain policy and configure Event Forwarding
Implement a domain-based DFS namespace that uses replication
Create a new Password Settings Object (PSO) for the IT users.
Deploy a standalone DFS namespace; Enable access-based enumeration and use DFS Replication

22. Recently it was decided to increase the performance of the company's Web Servers by deploying a NLB Web server farm. You need to ensure that the content is easily replicated across all the servers in the farm. You should implement this.
Recommend GPT and basic disks
Distributed File System (DFS) Replication
WSUS servers running in replica mode - and configure them to download updates from the WSUS server in the main office
Passive file screens

23. hr.domain.com domain has an OU named Sales...You need to give UserA administrative rights so that he can manage Group Policies for the Sales OU while meeting the following requirments: UserA must be able to create and configure Group Polices in hr.do
PowerShell 2.0
802.1.x NAP
Run the Delegation of Control Wizard on Sales OU. In Group Policy Management Console - modify the permissions of the Group Policy Objects container in the hr.domain.com domain.
Configure authorization rules for Web developers on each web server

24. to prevent VMs from receiving updats from a group policy
A relying party trust should be created.
Install the Remote Server Administration Tools (RSAT) on the Windows 7 computers.
Apply a WMI Filter to the policy. Note: You can use a WMI filter to filter out VM from being affected by a GPO the same way you can a physcial machine.
One virtual network...Install two network adapaters on each node. Configure the network adapters to communicate on separate subnets.

25. IF you need to automate deployment of 32 and 64 bit 2008 R2 servers
Then use Windows Deployment Services (WDS) on DHCP1.
Use a GPO to configure device installation restrictions
Improve the performance of File Servers
Microsoft Desktop Optimization Pack (MDOP) to your company

26. If users need access to files locally and must be able to access files at another site if the local copy is not available you should implement this.
A Fibre Channel (FC) disk storage subsystem that uses Microsoft Multipath I/O. Configure a RAID 5 array.
Branch Cache server that operates in Hosted Cache mode in your recommendation. This is an ideal solution if the branch office already maintains a Server 2008 R2 server solution (no additional licenses would be needed)
A Distributed File System (DFS) namespace
Converting physical servers to VMs - implementing SANn and SAN management components such as backup and site resiliency will create additional administrative overhead.

27. Your domain has three OUs - HR - IT - and Sales. You need to redesign the layout of the OUs to support the following: Prevent GPOs that are linked to the domain from applying to computers located in IT OU; minimize number of GPOs; minimize number of
Establish a Federated Trust between your company and the external partner. Deploy a 2008 R2 server that runs MIcrosoft SharePoint 2010 and that has the Active Directory Rights Management Services (AD MS) role installed.
Execute the Active Directory Diagnostics Data Collector Set and then review the report.
Implementing a Central Store. This will allow custom .admx files to replicate and be available to administrators on any administrative workstation with the RSAT tools installed in the enterprise
Configure block inheritance on the IT OU

28. Client computers run Windows 7 and all applications on the computers are configured to save documetns to the local Documents folder. You need a backup strategy that meets these: Back up the Documents folder for all users; minimize admin effort. To ac
The computer must be connected to the network when the end user clicks the icon and launches the install of the application.
Configure each SharePoint site to use a separate application pool - and then implement Windows System Resource Manager (WSRM)
Upgrade all the client computers to Windows 7 and implement a Secure Socket Tunneling Protocol (SSTP) VPN solution.
Implement folder redirection by using GPO. Then backup the folder redirection target.

29. You have 5 windows Server 2008 R2 servers that are configured with the File Server role. you need to monitor the file servers with the following requirements in mind: administrators must be able to create reports that display folder usage by differen
Modify properties of RODC server computer account.
Install File Server Resource Manager (FSRM) role service - and then configure Quota Managment and Storage Reports Management
Test-AppLockerPolicy
Assign the application to computers in the PC OU

30. Striped volumes
Improve the performance of File Servers
IIS Chared Configuration
Create an e-mail account in AD DS for your RMS users.
Create and deploy a logon script that runs Auditpol.

31. Srv1 is a file server that has five internal SCSI hard drives. Your storage strategy needs to meet the following requirements: Physically separates the operating system data from the user data; maximize the disk space available for data storage; uses
Properties of PSO need modified
Install a Server Core installation of Windows Server 2008 R2 Enterprise. Note: Remember clusters must be either 2008 Enterprise or Datacenter - you cannot build a Microsoft Cluster using Web or Standard Editions
Allocate three disks to a single RAID 5 volume for the user data. Allocate two disks to a mirrored volume for the operating system data.
Implement the Windows Search Service.

32. Capture all replication errors from all your DCs to a central location...
Raise the DFL to Windows Server 2008 R2.
Microsoft Application Virtualization (AppV)
Creating a data collector set that kick off a scritp that either move or delete files.
Configure event log subscriptions

33. You need a strategy for backing up your 2008 R2 file servers according to these: allows for individual file restore; allows for complete server recovery; supports scheduled backups; provides decentralized control over backups and recovery; minimizes
Apply a WMI Filter to the policy. Note: You can use a WMI filter to filter out VM from being affected by a GPO the same way you can a physcial machine.
File Server Resource Manager (FSRM) quotas and file screens
Back up to an external USB drive by using Windows Server Backup
Implement Shadow Copies

34. To allow a specifc user or group to manage the address information for the user accounts...
Recommend Active Directory delegation
Install and share a printer on a server and then enable printer pooling.
Attach VHD file created by Windows server backup
Certificate Templates

35. You need to devise a security solution so that after 15 days the documents distributed to the members of the School Board can only be opened by the creator owners in the high school year book department. You should recommend...
Group Policy Preferences
Then use Windows Deployment Services (WDS)
Attach VHD file created by Windows server backup
Active Directory Right Management Services (AD RMS)

36. 4 steps to perform authoritative restore of a deleted OU...
1) Restart dc in DirectoryServiceRestoreMode - 2) Restory system state data to date before organizational unit was deleted - 3) Use ntdsutil utility to mark organizational unit as authoritative 4) Restart Domain Controller
Install Windows Server 2008 R2 Web Edition - it will use the least amount of disk space.
Active Directory Rights Management Services (AD RMS) and Microsoft SharePoint Foundation 2010
Service user account for AD LDS

37. To allow connection to a 256 Kbps ISDN...
Then Upgrade clients to Win7 - implement Enterprise CA on Win 2008 R2 and implement IPSec VPN with cert-based authentication.
DISABLE slow link detection in the GPO
Deploy a GPO for the Sales OU
Deploy a failover cluster that contains one node in each office.

38. You need to come up with a solution for managing user accounts that: allows Help Desk department to manage the user objects in all domains and minimize the administrative effort required to manage the frequent changes to the Help Desk department
Create a new global group named HelpDesk and then add the Help Desk department user accounts to the Helpdesk group. Add the HelpDesk group to the Account Operators group that is in all three domains. A-G-U-L-P.
Add the Remote1-Admins group to the Administrators local group on each server in Remote1.
Authorization Manager
Attach VHD file created by Windows server backup

39. Domain.com recently deployed several Windows Server 2008 R2 file servers. You recently have had a problem with the file server in the sales department. On a regular basis the hard drive on the file server reaches capcity. You have to routinely perfor
Encrypting File System (EFS). This can be enabled locally or through a GPO.
Upgrade one of the TS to Windows Server 2008 R2 and configure it as the Remote Desktop Services Gateway (RD Gateway). Then implement Network Access Protection (NAP).
From Server1 - run the Create Basic Task Wizard
Install the File Server Resource Manager (FSRM) role service on the sales department file server. Configure hard quotas and file screening.

40. to ensure that users can ONLY view the list of DFS Targets to which they are assigned permissions
Implement one LUN for the quorum and another LUN for the data
Authorization Manager
Migrate the namespace to Windows SErver 2008 mode and enable access based enumeration (ABE). NOTE: ABE is a new feature in SERVER 2008; this requires that all DFS Server be 2008 or later.
Deploy Microsoft SharePoint Foundation 2010 - and then migrate the share to a new document library. Enable versioning for the library

41. To ensure that a file on a file server do not leave the organization you must implement this.
CAPublishGP group should have the Manage CA permission.
Software Restriction Polices
Dynamically expanding VHD's
AD RMS

42. Help desk staff must be able to update drivers on the domain controllers at the branch office and assign them the proper
Install the RSAT tool on their workstation to provide for more efficient network management
Administrative Role Separation
The WSUS client to retrieve updates from Microsoft Update (Do not Store updates locally)
Incoming external trust

43. To create and additional AD LDS applicaiton directory partition in existing instance...
Modify Object Access Settings AND Global Object Access Auditing settings FROM Advanced Audit Policy configurations
Configure caching on the shared folder (offline files)
Ldp
Modify properties of RODC server computer account.

44. When recommending the server configurations for the new failover cluster that will live in a virtual environment from Hyper-V Manager on each node - configure ...
Then install new Server 2008 R2 Enterprise subordinate CA.
One virtual network...Install two network adapaters on each node. Configure the network adapters to communicate on separate subnets.
Deploy a GPO to the WebSrvOU
Provide remote access to a Windows Server 2008 R2 server that has the Remote Server Administration Tools (RSAT) installed.

45. The Computer Management snap-in allows you to create shares both on...
Role Separation
Modify the schema of LDSInst1
Implement Windows System Resource Manager (WSRM) and configure user policies
Your machine and remote desktops

46. You need a tool that will help you manage LUN's for both iSCSI and Fibre Channel to support the provision of Virtual disks. You should recommend this.
Run the Delegation of Control Wizard on Sales OU. In Group Policy Management Console - modify the permissions of the Group Policy Objects container in the hr.domain.com domain.
Configure RODC for Administrator Role Separation
Allocate three disks to a single RAID 5 volume for the user data. Allocate two disks to a mirrored volume for the operating system data.
Storage manager for SANs

47. Policy states that users are to log into AD by usine a new User Principal Name (UPN). What tool should be used to modify the UPN suffix for all user accounts?
Windows System Resource Manager (WSRM)
Incoming external trust
DSMOD
Disable Site Link Bridging from IP Properties

48. You need to generate a report on the status of software updates for your Windows 7 client computers with the following requirements: display all of the operating system updates and Microsoft application updates that installed successfully and failed;
Install a full installation of Windows Server 2008 R2 Enterprise Edition on two servers and configure the failover cluster services on them.
Install WSUS 3.0 on a 2008 R2 server and configure Windows Update by using a GPO
Software Restriction Polices
Implement a GPO for each domain

49. If your company has the need to create administrative templates (.admx) files for Active Directory runnin on server 2008 R2 you should recommend...
The computer must be connected to the network when the end user clicks the icon and launches the install of the application.
Implementing a Central Store. This will allow custom .admx files to replicate and be available to administrators on any administrative workstation with the RSAT tools installed in the enterprise
Implement Shadow Copies
Include an iSCSI disk storage subsystem that supports Virtual Disk Service (VDS). Configure the storage subsystem as a RAID 5 array.

50. The ability to set quotas at the volume level has been around for many years - however if you have have servers that need quotas - but instead of placing the quota at the volume level you need to place the quota on an individual folder -
Deploy one new server that runs Windows Server 2008 R2 Enterprise Edition and install the Hyper-V feature on the new server. Then create three child virtual machines.
Implement File Server Resource Manager (FSRM) quotas on the desired servers
Use Windows Server Backup to back up each domain controller to a remote network share. Use Windows Deployment Services (WDS) to deploy the Windows Recovery Environment (Windows RE)
Discover the run Microsoft Baseline Security Analyzer (MBSA)