SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
MSITP
Start Test
Study First
Subjects
:
certifications
,
msitp
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. You plan to upgrade your networks desktops to Windows 7 however - after testing you discover an application that will only run on Windows XP. You need to make this application available to a large number of desktops.
Create a MEDV workspace
Authorization Manager
CAPublishGP group should have the Manage CA permission.
1) Enable the Audit object access setting in the Local Security Policy for Srv1. 2) Configure auditing in the Certification Authority snap-in.
2. You need to ensure that your Windows 2008 R2 file servers meet the following: supports volumes larger than 2 terabytes - if a single disk fails - maintain data redundancy - if a single server fails - maintain access to all data - maximize disk throug
Repadmin
Deploy a two-node cluster. Connect an external storage subsystem. Configure the external subsystem as a RAID 10 array - and format the array as a GPT disk.
Implement Windows System Resource Manager (WSRM) and configure a resource-allocation policy for process-based management.
Windows System Resource Manager (WSRM)
3. To prevent computers that do not have the Windows Firewall enabled from connecting to the wireless access point or the physical switch - you should implement this.
1) Remove the Auth Users account from the Secutiy tab of the company.com DNS zone properties. 2) Assign the server computer accounts to the Allow on Create All Child Objects permission on the Security tab of the company.com DNS zone properties.
802.1.x NAP
Jill came down with 2.50.
Event Subscriptions
4. The solution requires that teachers that have been issued district based laptops - work remotely - and teach only on-line classes - must connect to the school network using split-tunnel VPN. Need to be sure that: minimize traffic over the VPN wheneve
5. Certain apps may require that the end user have the ability to make changes to the application - however some applications may allow these changes to be made in the registry. To give you as the administrator the ability to make changes as necessary -
Active Directory snapshots and Tombstone reanimation
Software Restriction Polices
Network Load Balancing (NLB)
Group Policy Preferences
6. When you need to distribute a large number of incoming connections to stateless applications such as Web servers or VPN servers you should implement this.
Create an e-mail account in AD DS for your RMS users.
Network Load Balancing (NLB)
Create a MEDV workspace
Jill came down with 2.50.
7. To join a server/PC outside of the domain to the network...
DISABLE slow link detection in the GPO
Your machine and remote desktops
djoin /requesteodj from internal server - djoin /provision from outside server/PC
Then use Key Management Service (KMS) - DHCP server - and Windows Deployment Services.
8. You just dconfigured so that Server1 zone is stored in AD and accept secure dynamic updates. What command should be executed so that Server2 can accept secure dynamic updates?
Authorization Manager
Upgrade one of the Server 2003 servers to Server 2008 R2. On this server implement the Remote Desktop Services Gateway (RD Gateway) role and configure a Remote Desktop Services connection authorization policy (RD CAP).
dnscmd dcsrv2.company.com /zoneresettype company.com /dsprimary
On one server - create event subscriptions for each server...on the server - attach tasks to the application error events
9. In order to manage websites without having to logon you can use
Execute the Active Directory Diagnostics Data Collector Set and then review the report.
Implement a Remote Desktop Connection Broker (RD Connection Broker)
PowerShell 2.0
Then make sure all DCs are runing Windows Server 2008 R2 - and then use a GPO to enable Trusted Platform Module backups to AD.
10. If you need to implement a Cert Services solution that automates distribution of certificates - ensures security and gives external users acess to resources that use cert-based authentication
Enable Windows Remote Management (WinRM) on the servers.
Deploy an off-line standalone Root CA - deploy an on-line Enterprise Subordinate CA - and deploy an on-line standalone Subordinate CA.
Deploy Remote Desktop Connection 7.0 on all computers; Enabled the Desktop Experience feature on the RD Session host; and install the application on the Remote Desktop Services server.
In each office - install a WSUS server and configure the WSUS servers as a replica of the main office.
11. You need to ensure that the guest account on all servers is disabled to
Discover the run Microsoft Baseline Security Analyzer (MBSA)
IPSec based enforcement. IPSec enforcement should be used when you want a stronger solution than 802.1x - DHCP or VPN based NAP. IPSec based NAP cannot be bypassed by modifying the NAP agent/client.
Store the WSUS updates on a Distributed File System (DFS) link that uses multiple replicating targets.
Back up to an external USB drive by using Windows Server Backup
12. For the users that work remotely that need access to files from the corporate office you should...
Disable Site Link Bridging from IP Properties
Recommend Offline Files
Implement the Windows Search Service.
Network Load Balancing (NLB)
13. You are about to deploy a distributed database appliation that will run on multiple 2008 R2 servers. This deployment needs to follow these requirements: uses the existing network infrastructure; uses standard Windows management tools; allocates stora
Event Log Subscriptions
Include an iSCSI disk storage subsystem that supports Virtual Disk Service (VDS). Configure the storage subsystem as a RAID 5 array.
Congifure the new Local User and Groups by using Group Policy Preferences option and link the policy to the Branch office site.
Configure each SharePoint site to use a separate application pool - and then implement Windows System Resource Manager (WSRM)
14. Server1 collects all events that occur on your domain controllers. Using the minimal effort - from Event Viewer - what should be done to ensure you are notified when a specific event has occurred on any of your domain controllers?
Network Policy Server (NPS) and Routing and Remote Access Service (RRAS)
Role Separation
Store all sensitive files in EFS encrypted folders and require home users to access the files by using SSTP
From Server1 - run the Create Basic Task Wizard
15. You need to recommend a server configuration to support a Web-based application that must meet these requirements: the app must be available to all users if a single server fails; support the installation of .NET applications; Minimize software costs
Create TWO new starter GPO's one with user administrative templates configure - and one with computer admin template configured - and export them to .cab files - and make the .cab files available in both forests...Then when creating new group policie
FFL Windows Server 2008 R2
Install the full installation of Windows Server 2008 R2 Web Edition on two servers - and configure them in a Network Load Balancing cluster
net stop ntds
16. All servers run 2008 R2 and all client computers run Windows 7. Provide a necessary access solution that meets: only computers that have the most up-to-date service packs can be granted general network access; all noncompliant computers must be redir
Data Recovery Agent
WDS
Implement Network Access Protection (NAP)
Implement Windows System Resource Manager (WSRM) and configure user policies
17. If subnets are connected by CISCO router that is RFC-1542 compliant
Upgrade one of the Server 2003 servers to Server 2008 R2. On this server - implement the Remote Desktop Services Gateway (RD Gateway) role and configure a Remote Desktop Services Resource authorization policy (RD RAP).
Offline domain join
Domain based DFS namespace and configure a DFS replication group
Use CISCO IP Helper command to configure.
18. Your office has no Internet connection. Your data provisioning solution must meet these requirements: users that are not connected to the network must be able to access files and folders on the network; unauthorized users must not have access to the
Include an iSCSI disk storage subsystem that supports Virtual Disk Service (VDS). Configure the storage subsystem as a RAID 5 array.
Microsoft System Center Data Protection Manager
Configure caching on the shared folder and configure offline files to use encryption
Get-ADUser cmdlet
19. Your company recently created a corporate web site using their own internal developers. Recently your CIO has decided that it would be best that some of the work be done by an outside contractor - and to allow that contractor to only the specific sec
Changed manually
Authorization Manager
IIS Manager user account
1) Publish the code signing template. 2) Modify the security settings on the template to allow only the administrators to request code signing certificates.
20. You have a 2008 R2 serever that has SQL Server 2008 installed. The server has one RAID 5 array and two RAID 1 arrays. You need to allocate hard disck space on the server according to the followign requirements: prevent data los if a single hard disk
Place the operating system files on one of the RAID 1 array - place the SQL transaction logs on the other RAID 1 array - and place the SQL database files on the RAID 5 array
1) Enable the Audit object access setting in the Local Security Policy for Srv1. 2) Configure auditing in the Certification Authority snap-in.
A Distributed File System (DFS) namespace
Network Load Balancing (NLB) Cluser for the front end WSUS servers. This will allow users to have the continued access in the event that WSUS servers become unavailable.
21. You need to deploy a new application according to the following requirements: must be available to remote users when they are offline; must access the application from an icon on the Start menu
Disable the user half of the policy. For flow reasons we can stop policies from affecting certain computers and users by placing blocks at the OU level. This will prevent the policy from parent OUs from flowing into the child OU as long as the parent
Upgrade one of the Server 2003 servers to Server 2008 R2. On this server - implement the Remote Desktop Services Gateway (RD Gateway) role and configure a Remote Desktop Services Resource authorization policy (RD RAP).
Configure RADIUS accounting by using SQL loggin on each server and use Srv1 as database for RADIUS aaccounting.
Assign the application to computers in the PC OU
22. To limit each user's storage space and to prevent users from storing audio and video files on the servers you should recommend
The applications within the VM by using RemoteApp. Create a RemoteApp and Desktop Connection for each VM.
Incoming external trust
Share and Storage Management
File Server Resource Manager (FSRM) quotas and file screens
23. Two different solutions are available to help assign IP addresses to remote clients that need to VPN or Dial-in to the branch office.
24. You need to plan the deployment of an application that must meet these requirements: users must have - access to the app when they are connected to the network; access the application from an icon on their desktops.
Incoming external trust
Assign the application to all client computers by using a GPO.
Deploying a WSUS server in replica mode at the Branch office. You can also configure the WSUS in replica mode/split - this will allos the WSUS server to download list of updates from the parent but download the actual updates directly from Windows up
Windows Deployment Services (WDS)
25. You need to rebuild a server and reinstall the operating system - and rollback all operations master roles to original state...
1) Seize operations master roles from sever1 to server2 2) Rebuild Server as a replica domain controller 3) Transfer operations master roles from Server2 to Server1
Enable - ADoptionalFeature cmdlet
Install Windows Server 2008 R2 Datacenter Edition on each server. Deploy the servers in a failover cluster. Deploy an iSCSI storage area network (SAN) - You have a main office and branch office.
Network Policy Server (NPS) and Routing and Remote Access Service (RRAS)
26. DFL is...
Win2000 Native
Deploy Microsoft System Center Operations Manager (SCOM)
Implement a GPO for each domain
Group Policy Preferences
27. Deployment solutions that will allow both the 64 bit version of Office 2010 and the 32 bit version Office 2003 to run at a same time on a Windows 7 computer - and to do that when the computer is offline - are very limited. You should recommend
Use Netsh tool from administrator's computer.
Microsoft Application Virtualization (AppV)
Creating a data collector set that kick off a scritp that either move or delete files.
Disable Site Link Bridging from IP Properties
28. You need to design your WSUS infrastructure so that updates are highly available. To do so
Active Directory Rights Management Services (AD RMS) and Microsoft SharePoint Foundation 2010
Store the WSUS updates on a Distributed File System (DFS) link that uses multiple replicating targets.
You could restore the backup to an alternate location. Then mount the database using the AD Database Mounting Tool (Dsamain.exe)
Ntdsutil
29. To ensure that a file on a file server do not leave the organization you must implement this.
Printer driver isolation
AD RMS
In each office - install a WSUS server and configure the WSUS servers as a replica of the main office.
Run the Delegation of Control Wizard on Sales OU. In Group Policy Management Console - modify the permissions of the Group Policy Objects container in the hr.domain.com domain.
30. All DCs run Windows Server 2008 R2 and have the DNS Server role installed. The domain controllers for each location are stored locally. Each has its own standard primary zone to support its local domain.You need a plan that meets the following: WAN l
Remote Desktop Virtualization host - you wouldn't want all the users on the same Remote Desktop Session host to be local administrators.
Deploy one new server that runs Windows Server 2008 R2 Enterprise Edition and install the Hyper-V feature on the new server. Then create three child virtual machines.
Create a standard secondary of domain and create standard secondary of other domain.
Create a GPO and link the GPO to the domain then configure the GPO to be enforced
31. New password settings object (PSO) created and needs to be applied to user
One virtual network...Install two network adapaters on each node. Configure the network adapters to communicate on separate subnets.
Provide remote access to a Windows Server 2008 R2 server that has the Remote Server Administration Tools (RSAT) installed.
Configure separate application pools for each application
Properties of PSO need modified
32. Can be used to install the Windows RE on existing servers
One Remote Desktop connection authorization policy (RD CAP) and two Remote Desktop resource authorization polices (RD RAPs)
Configure block inheritance on the IT OU
1) Add the branch office admin accounts to teh Group Policy Creator Owners Group. 2) Run the Delegation of Control Wizard and delegate the right to link GPOs for their branch OUs to the branch office admins.
WDS
33. To defragment and AD database...
Import-Module
net stop ntds
Store all sensitive files in EFS encrypted folders and require home users to access the files by using SSTP
Dfsrdiag
34. You need to implement read only copies of files at several locations. You currently have DFS for 2008 deployed. You should recommend this.
Assign permissions for the Groups OU and Branch OU to the help desk technicians.
Deploy a GPO for the Sales OU
Upgrading DFS to Windows Server 2008 R2
Install WSUS 3.0 on a 2008 R2 server and configure Windows Update by using a GPO
35. To delegate authority to users to manage only certain areas in Hyper-V use the
Deploy a failover cluster that contains one node in each office.
Authorization Manager role assignment
Configure event log subscriptions
Import-Module
36. The Computer Management snap-in allows you to create shares both on...
Your machine and remote desktops
Deploy one new server that runs Windows Server 2008 R2 Enterprise Edition and install the Hyper-V feature on the new server. Then create three child virtual machines.
Upgrading DFS to Windows Server 2008 R2
Import-Module
37. When one needs to audit files - folders - printers and the registry enable
Create a standard secondary of domain and create standard secondary of other domain.
Modify Object Access Settings AND Global Object Access Auditing settings FROM Advanced Audit Policy configurations
Object access auditing on the server that supports the resource. Note: Enabling audit access also helps when auditing your Cert Servers
Create an Active Directory-Integrated zone.
38. You have 159 server 2008 R2 servers that must meet the following: notification by e-mail to the administrator if error occurs on any server with minimum effort...
You can apply IE Group Policies only to the OU's that contain clients that must be restricted based on your corporate policies.
Branch Cache server that operates in Hosted Cache mode in your recommendation. This is an ideal solution if the branch office already maintains a Server 2008 R2 server solution (no additional licenses would be needed)
1) Seize operations master roles from sever1 to server2 2) Rebuild Server as a replica domain controller 3) Transfer operations master roles from Server2 to Server1
On one server - create event subscriptions for each server...on the server - attach tasks to the application error events
39. If users need access to files locally and must be able to access files at another site if the local copy is not available you should implement this.
Then use Windows Deployment Services (WDS) on DHCP1.
A Distributed File System (DFS) namespace
dnscmd tool
One virtual network...Install two network adapaters on each node. Configure the network adapters to communicate on separate subnets.
40. To configure AD FS so tokens contain information from Active Directory domain...
PDC emulator with w32tm.exe
Implement Microsoft System Center Configuration Manager (SCCM) 2007 R2.
Install WSUS 3.0 on a 2008 R2 server and configure Windows Update by using a GPO
New ACCOUNT STORE should be added and configured
41. What should be done to resolve names by using GlobalNames zone?
Login to one DC and create and configure a conditional forwarder to replicate to all DNS servers in the forest.
FFL Windows Server 2008 R2
dnscmd tool
Request and obtain a server authentication certificate from a trusted certification authority (CA) in your organization or from a trusted third-party CA - Authorization Manager provides a flexible framework for integratin role-based access control in
42. ServerA collects all events that occur on domain controllers with minimum effort from Event Viewer - what should be done to ensure notified when specific event occurs on any domain controllers...
Upgrade one of the TS to Windows Server 2008 R2 and configure it as the Remote Desktop Services Gateway (RD Gateway). Then implement Network Access Protection (NAP).
WSUS servers running in replica mode - and configure them to download updates from the WSUS server in the main office
From Server A - run Create Basic Task Wizard
Deploy Microsoft System Center Data Protection Manager 2010 and create a new protection group.
43. There are now 4 primary types of VPN solutions - PPTP - L2TP - SSTP and Direct Access. If you need to implement a VPN on Vista SP1 or higher machines you can implement SSTP.
Properties of PSO need modified
On one server - create event subscriptions for each server...on the server - attach tasks to the application error events
SSTP is a good solution if you have Vista SP1 or higher and your security team has already opened port 443 on the firewall and the coporate security policy states that they would prefer not to open any more ports on the firewall than necessary. SSTP
Deploy a failover cluster that uses Node and File Share Disk Majority
44. All servers are 2008 R2. All client computers are Vista and have Outlook 2007 installed. Following resources are being accessed: exchange 2010 by using Outlook 2007 - database server on TCP port 38968 - 2008 R2 file servers. You need to provide users
Subnet object needs to be created
Upgrade all the client computers to Windows 7 and implement a Secure Socket Tunneling Protocol (SSTP) VPN solution.
NOT be able to store that data on an iSCSI SAN
Deploy Microsoft System Center Operations Manager (SCOM)
45. If you want to allow the administrator in each office to manage DHCP scope for their own office - and prevent the administror of one office from managing DHCP scopes on the DHCP server in another office with mimimal admin effort
Then Migrate DHCP server role from the domain controllers to the files servers. On file servers - add admin for office to DHCP admin local group.
Win2000
Install Windows Server Backup and modify the Windows firewall settings
Active Directory Right Management Services (AD RMS)
46. You have two identical print devices. You must plan a print services infrastructure where: the print services must be available - even if one print device fails and have the ability to manage the print queue from a central location
Upgrade one of the Server 2003 servers to Server 2008 R2. On this server implement the Remote Desktop Services Gateway (RD Gateway) role and configure a Remote Desktop Services connection authorization policy (RD CAP).
Configure a server with the Remote Desktop Services role and install Outlook 2003 on the Remote Desktop Services server. Then publish Outlook 2003 as a Remote Desktop Services RemoteApp (RD RemoteApp).
Install and share a printer on a server and then enable printer pooling.
Microsoft Application Virtualization (AppV)
47. Your AD environment has an Enterprise Root CA. What 2 actions should you take to ensure that only administrators can sign code?
Implement one LUN for the quorum and another LUN for the data
A Fibre Channel (FC) disk storage subsystem that uses Microsoft Multipath I/O. Configure a RAID 5 array.
Deploy Microsoft System Center Data Protection Manager 2010 and create a new protection group.
1) Publish the code signing template. 2) Modify the security settings on the template to allow only the administrators to request code signing certificates.
48. What GPO setting should be configured to prevent all users from running an application?
Software Restriction Polices
Remote Server Administrative Tools (RSAT) on your administrative workstation or laptop
Upgrade one of the TS to Windows Server 2008 R2 and configure it as the Remote Desktop Services Gateway (RD Gateway). Then implement Network Access Protection (NAP).
CAPublishGP group should have the Manage CA permission.
49. Jack and Jill go up the hill - both with a buck and a quarter
The Group Policy Management console
Jill came down with 2.50.
Configure each SharePoint site to use a separate application pool - and then implement Windows System Resource Manager (WSRM)
Add the IT Help Desk Users to the Group Policy Creator Owners group and then create a new Starter GPO.
50. 3 Servers are Network Policy Servers (NPS) that function as RADIUS servers. The network has 20 wireless access points that are configured as RADIUS clients. You need to plan an audit strategy with the following requirements: stores audit data in a ce
Configure RADIUS accounting by using local file loggin on each server. Store the log files in an Internet Authentication Service (IAS) format on a shared folder on one of the servers (Srv1).
Microsoft System Center Data Protection Manager 2010
Configure the zone as an Activde Directory-Integrated zone.
Create TWO new starter GPO's one with user administrative templates configure - and one with computer admin template configured - and export them to .cab files - and make the .cab files available in both forests...Then when creating new group policie