Test your basic knowledge |

MSITP

Subjects : certifications, msitp, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. So a user can install updates on an RODC while preventing them from logging on to any other domain controller...
Then configure auto enrollment of certificates and Credential Roaming.
Deploy Microsoft System Center Data Protection Manager 2010 and create a new protection group.
Changed manually
Use local roles options within "dsmgmt"

2. George's user account has been deleted in Active Directory. George's user account needs to be restored by usine minimal amount of effort. What should be done?
Perform an authoritative restore
Reinstall AD DS on DCC.company.com as a WRITABLE DC.
Dsmgmt
Implement a domain-based DFS namespace that uses replication

3. GPO setting to prevent all users from running an application
Software Restriction Polices
Deploy a failover cluster that contains one node in each office.
Install a new server that runs a 64-bit version of Windows Server 2008 R2 Enterprise Edition. Install the Hyper-V role. Install the App1 and App2 in separate child virtual machines.
Assign the application to all client computers by using a GPO.

4. You need to ensure that users that access your web site can use any browser; however - they must be authenticated on a membership page. In order for this authentication to be done securely in IIS implement
Install WSUS 3.0 on a 2008 R2 server and configure Windows Update by using a GPO
Basic Authentication and SSL
Enable - ADoptionalFeature cmdlet
dnscmd tool

5. To control access to resources using WSRM and to help prevent memory leaks from monopolizing your web server
Configure separate application pools for each application
CAPublishGP group should have the Manage CA permission.
Run adprep /forestprep and adprep /domainprep
1) Enable the Audit object access setting in the Local Security Policy for Srv1. 2) Configure auditing in the Certification Authority snap-in.

6. If you need to implement a Cert Services solution that automates distribution of certificates - ensures security and gives external users acess to resources that use cert-based authentication
Deploy an off-line standalone Root CA - deploy an on-line Enterprise Subordinate CA - and deploy an on-line standalone Subordinate CA.
Windows Deployment Services (WDS)
Domain based DFS namespace and configure a DFS replication group
Dfsrdiag

7. You have 159 server 2008 R2 servers that must meet the following: notification by e-mail to the administrator if error occurs on any server with minimum effort...
Use the Local Roles options with dsmgmt.
Add the user to the Domain Admins global group
On one server - create event subscriptions for each server...on the server - attach tasks to the application error events
newly implemented technologies must have a minimal effect on LAN traffic - is met by using express installation files

8. To prevent computers that do not have the Windows Firewall enabled from connecting to the wireless access point or the physical switch - you should implement this.
Configure event log subscriptions
802.1.x NAP
Deploy WSUS server on secure network. From an online WSUS server - copy the update metadata and the WSUS content to the WSUS server on the secure network.
DISABLE slow link detection in the GPO

9. to prevent VMs from receiving updats from a group policy
Apply a WMI Filter to the policy. Note: You can use a WMI filter to filter out VM from being affected by a GPO the same way you can a physcial machine.
Deploy an off-line standalone Root CA - deploy an on-line Enterprise Subordinate CA - and deploy an on-line standalone Subordinate CA.
Store the WSUS updates on a Distributed File System (DFS) link that uses multiple replicating targets.
You can apply IE Group Policies only to the OU's that contain clients that must be restricted based on your corporate policies.

10. You need a solution that replaces servers that host 2 applications. This solution must use Windows Server 2008 R2 and minimize cost.
Install a new server that runs a 64-bit version of Windows Server 2008 R2 Enterprise Edition. Install the Hyper-V role. Install the App1 and App2 in separate child virtual machines.
Windows Deployment Services (WDS)
Group Policy Preferences
In each office - install a WSUS server and configure the WSUS servers as a replica of the main office.

11. If your company has the need to create administrative templates (.admx) files for Active Directory runnin on server 2008 R2 you should recommend...
Ntfrsutil
Implementing a Central Store. This will allow custom .admx files to replicate and be available to administrators on any administrative workstation with the RSAT tools installed in the enterprise
Deploy Microsoft SharePoint Foundation 2010 - and then migrate the share to a new document library. Enable versioning for the library
Active Directory Users and Computers

12. To ensure that a file on a file server do not leave the organization you must implement this.
AD RMS
DSMOD
Configure RADIUS accounting by using SQL loggin on each server and use Srv1 as database for RADIUS aaccounting.
DFL needs to be Windows Server 2008

13. All servers run 2008 R2 and all client computers run XP SP1. You need to deploy Distributed File System (DFS) to meet these: minimize cost; provide redundancy in the event a single server fails; ensure client computers reconnect to their preferred se
Deploy two writable domain controllers in ad.company.com and recommend to configure both domain controllers as GC's.
Ntdsutil
Migrate the namespace to Windows SErver 2008 mode and enable access based enumeration (ABE). NOTE: ABE is a new feature in SERVER 2008; this requires that all DFS Server be 2008 or later.
Implement a domain-based DFS namespace and add a second namespace server; Enable the "Clients fail back to preferred targets" option. Make sure all client computers have at least XP SP2.

14. From Win7 PC - to view all account logon successes that occur on domain and consolidate to one list...
djoin /requesteodj from internal server - djoin /provision from outside server/PC
Winrm quickconfig
IIS Chared Configuration
1) Stop AD services service 2) Compact ntds.dit 3) Move to %windir% ntds 4) Start AD domain services service

15. When deploying an application using the Group Policy distribution method assign the...
Implement Shadow Copies
Configure the zone as an Activde Directory-Integrated zone.
Assign permissions for the Groups OU and Branch OU to the help desk technicians.
Application to the computer if you need to ensure that the application is installed on the computer before the user logs in.

16. You need to deploy a distributed database application that meets the following: allocates storage to servers as required; isolates storage traffic from the exisiting network; ensures that data is available if a single disk fails; ensures that data is
A Fibre Channel (FC) disk storage subsystem that uses Microsoft Multipath I/O. Configure a RAID 5 array.
Install Hyper-V role and convert physical machines into virtual machines
Create and deploy a logon script that runs Auditpol.
Place the operating system files on one of the RAID 1 array - place the SQL transaction logs on the other RAID 1 array - and place the SQL database files on the RAID 5 array

17. Backup solutions for the files servers that support a robotic-based tape library must support the enterprise; you should recommend
A Fibre Channel (FC) disk storage subsystem that uses Microsoft Multipath I/O. Configure a RAID 5 array.
Microsoft System Center Data Protection Manager
Run a full back up by using Windows Server Backup - and then run a full back up of the Hyper-V hosts by using Windows Server Backup.
Implement Microsoft System Center Configuration Manager (SCCM) 2007 R2.

18. To build a highly secure server cluster with a reduced attack surface area
1) Stop AD services service 2) Compact ntds.dit 3) Move to %windir% ntds 4) Start AD domain services service
Install a Server Core installation of Windows Server 2008 R2 Enterprise. Note: Remember clusters must be either 2008 Enterprise or Datacenter - you cannot build a Microsoft Cluster using Web or Standard Editions
Increase the tombstone lifetime for the forest.
View properties of %systemroot%ntdsntds.dit

19. to minimize the attack surface area of the servers and reduce licensing cost you should recommend
Increase the tombstone lifetime for the forest.
Configure a server with the Remote Desktop Services role and install Outlook 2003 on the Remote Desktop Services server. Then publish Outlook 2003 as a Remote Desktop Services RemoteApp (RD RemoteApp).
Passive file screens
Installing Hyper-V on a Server Core installation of Windows Server 2008 R2 Enterprise

20. You need to deploy apps to client computers according to these req.: apps must be deployed to client computers that meet minimum hardware requirements; detaild reports on success/failure of the app deployments must be provided; deployments must be sc
AD Rights Management Services
Implement Microsoft System Center Configuration Manager (SCCM) 2007 R2.
Assign the application to all client computers by using a GPO.
Modify properties of RODC server computer account.

21. To join a server/PC outside of the domain to the network...
Configure RADIUS accounting by using local file loggin on each server. Store the log files in an Internet Authentication Service (IAS) format on a shared folder on one of the servers (Srv1).
Click Start - click Run - type cmd - and then press ENTER. - At the command prompt - type dsmgmt.exe - and then press ENTER. - For a list of valid parameters - type ? - and then press ENTER. - By default - no local administrator role is defined on th
djoin /requesteodj from internal server - djoin /provision from outside server/PC
Deploy a failover cluster that contains one node in each office.

22. You have been tasked with backing up all the GPOs in the domain. The IT manager also wants you to minimize the size of the backup. You decide to use...
The Group Policy Management console
From Server1 - run the Create Basic Task Wizard
Deploy Microsoft System Center Data Protection Manager 2010 and create a new protection group.
Install Microsoft Secure Socket Tunneling Protocol (SSTP)

23. If you need to deploy multiple servers through automation of installation and activation and minimize network traffic
Multipath I/O feature
Event Subscriptions
Then use Key Management Service (KMS) - DHCP server - and Windows Deployment Services.
Upgrade one of the TS to Windows Server 2008 R2 and configure it as the Remote Desktop Services Gateway (RD Gateway). Then implement Network Access Protection (NAP).

24. You are about to deploy a distributed database appliation that will run on multiple 2008 R2 servers. This deployment needs to follow these requirements: uses the existing network infrastructure; uses standard Windows management tools; allocates stora
Implement Shadow Copies
Configure RADIUS accounting by using SQL loggin on each server and use Srv1 as database for RADIUS aaccounting.
Include an iSCSI disk storage subsystem that supports Virtual Disk Service (VDS). Configure the storage subsystem as a RAID 5 array.
Deploy Microsoft System Center Data Protection Manager 2010 and create a new protection group.

25. What should be done first to defragment the AD database?
Properties of PSO need modified
Run a full back up by using Windows Server Backup - and then run a full back up of the Hyper-V hosts by using Windows Server Backup.
Run net stop ntds
Configure event log subscriptions

26. You need to relocate an AD LDS instance from C: Drive to D: Drive
1) Run net stop ADLDS command 2) Use ntdsutil tool to move db files 3) Run net start ADLDS cmd
Deploy it by using Group Policy Software Installation method
Deploy a failover cluster that uses Node and File Share Disk Majority
An Active Directory subnet object needs to be created.

27. Jack and Jill go up the hill - both with a buck and a quarter
Jill came down with 2.50.
Add the IT Help Desk Users to the Group Policy Creator Owners group and then create a new Starter GPO.
Domain based Distributed File System (DFS) will reduce network traffic
Then install new Server 2008 R2 Enterprise subordinate CA.

28. You need a strategy for backing up your 2008 R2 file servers according to these: allows for individual file restore; allows for complete server recovery; supports scheduled backups; provides decentralized control over backups and recovery; minimizes
AD Domains and Trusts
Implement folder redirection by using GPO. Then backup the folder redirection target.
Network Load Balancing (NLB)
Back up to an external USB drive by using Windows Server Backup

29. You have few Server 2003 servers that have Terminal services installed. You also have a firewall that runs ISA Server 2006. Your remote access strategy for the terminal servers needs to meeet the following: restricts accsss to specific Remote Desktop
Disable Site Link Bridging from the IP properties
Deploying a WSUS server in replica mode at the Branch office. You can also configure the WSUS in replica mode/split - this will allos the WSUS server to download list of updates from the parent but download the actual updates directly from Windows up
Deploy a GPO for the Sales OU
Upgrade one of the Server 2003 servers to Server 2008 R2. On this server - implement the Remote Desktop Services Gateway (RD Gateway) role and configure a Remote Desktop Services Resource authorization policy (RD RAP).

30. If you want to allow single-label name resolution
Then configure GlobalNames zones on each domain controller.
Ensure your account - or the group is a member of the local Administrators group for that specific server.
Configure an audit policy by editing the default domain policy and configure Event Forwarding
Apply a WMI Filter to the policy. Note: You can use a WMI filter to filter out VM from being affected by a GPO the same way you can a physcial machine.

31. You need to deploy 15 Server Core installations that are only accessible by HTTP and HTTPS. Administration of these must be able to enable administrators to install and administer server roles remotely and fully manage servers remotely
Enable Windows Remote Management (WinRM) on each server.
dnscmd
802.1.x NAP
DISABLE slow link detection in the GPO

32. 3 Servers are Network Policy Servers (NPS) that function as RADIUS servers. The network has 20 wireless access points that are configured as RADIUS clients. You need to plan an audit strategy with the following requirements: stores audit data in a ce
FILES option within Ntdsutil
The WSUS client to retrieve updates from Microsoft Update (Do not Store updates locally)
Configure RADIUS accounting by using local file loggin on each server. Store the log files in an Internet Authentication Service (IAS) format on a shared folder on one of the servers (Srv1).
Import-csv password.csv | Foreach {New-ADUser -Name $_.Name -Enabled $true_AccountPassword (ConvertTo_SecureString $_.Password -AsPlainText -force)}

33. Policy states that users are to log into AD by usine a new User Principal Name (UPN). What tool should be used to modify the UPN suffix for all user accounts?
Loopback Processing - The purpose of the Loopback Processing policy is to prevent usesr policies that currently affect the user from following them to a publicly used or (shared remote desktop) computer. We may indeed in many cases want these policie
DSMOD
Ntfrsutil
Implement Network Access Protection (NAP)

34. If you need to allow an external partner's computer to access internal network resources by using SSTP
Deploy the Root CA certificate to the external computers.
Install a full installation of Windows Server 2008 R2 Enterprise Edition on two servers and configure the failover cluster services on them.
Add the Remote1-Admins group to the Administrators local group on each server in Remote1.
Then use Key Management Service (KMS) - DHCP server - and Windows Deployment Services.

35. To modify several user accounts to a new UPN suffix
Add-ADFineGrainedPasswordPolicySubject cmdlet
Reinstall AD DS on DCC.company.com as a WRITABLE DC.
Active Directory Users and Computers utility
Event Log Subscriptions

36. To protect all computers on the network from unwanted access and to ensure a consistent configuration
IIS Manager user account
Configure Firewall Group Policies and link them at the Domain level
Increase the tombstone lifetime for the forest.
Back up to an external USB drive by using Windows Server Backup

37. Requirements are: support the installation of SQL Server 2008; Provide redundancy for SQL services if a single server fails. To accomplish this
The Group Policy Management console
Windows System Resource Manager (WSRM)
Install a full installation of Windows Server 2008 R2 Enterprise Edition on two servers and configure the failover cluster services on them.
Store all sensitive files in EFS encrypted folders and require home users to access the files by using SSTP

38. Recently you have installed a special application on your web sites that requires using a managed service account on the Web Servers. This application runs on a web server in each of 10 separate Active Directory domains.

39. AD RMS is being used on the network. George is only a member of the AD RMS Enterprise Administrators group. Mitt needs to be able to change the service connection point (SCP) for the AD RMS installation. What should be done so George can accomplish t
Incoming external trust
Microsoft Desktop Optimization Pack (MDOP)
Add George to the Domain Admins group.
Branch Cache server that operates in Hosted Cache mode in your recommendation. This is an ideal solution if the branch office already maintains a Server 2008 R2 server solution (no additional licenses would be needed)

40. You have three domain controllers that perform a full back up every day. You need a recovery strategy for AD objects that meets these requirements: allows objects in a backup to be compared to objects in the live AD database; minimizes admin effort.
Create a Central Store
You could restore the backup to an alternate location. Then mount the database using the AD Database Mounting Tool (Dsamain.exe)
Deploy a failover cluster that contains one node in each office.
Microsoft Desktop Optimization Pack (MDOP)

41. When backing up multiple servers it is a Microsoft best practice to add the authorized user or group to the

42. In AD Sites and Service - which level is Universal Group Membership caching activated / deactivated?
Implement Distributed File System Replication (DFSR) on both servers
One virtual network...Install two network adapaters on each node. Configure the network adapters to communicate on separate subnets.
Assign the application to all client computers by using a GPO.
Site

43. To configure AD FS so tokens contain information from Active Directory domain...
Assign the support technicans to the Administrators group on the Windows Server 2008 R2 servers.
Install From Media IFM
The applications within the VM by using RemoteApp. Create a RemoteApp and Desktop Connection for each VM.
New ACCOUNT STORE should be added and configured

44. Company.com is working on a set of corporate documents. These documents are stored in a shared folder on your corporate file server. You need to protect documents as they get created.
Deploy Microsoft SharePoint Foundation 2010 - and then migrate the share to a new document library. Enable versioning for the library
Modify Object Access Settings AND Global Object Access Auditing settings FROM Advanced Audit Policy configurations
CAPublishGP group should have the Manage CA permission.
Upgrade all the client computers to Windows 7 and implement a Secure Socket Tunneling Protocol (SSTP) VPN solution.

45. You need to design your WSUS infrastructure so that updates are highly available. To do so
Active Directory Right Management Services (AD RMS)
Branch Cache server that operates in Hosted Cache mode in your recommendation. This is an ideal solution if the branch office already maintains a Server 2008 R2 server solution (no additional licenses would be needed)
Upgrade all the client computers to Windows 7 and implement a Secure Socket Tunneling Protocol (SSTP) VPN solution.
Store the WSUS updates on a Distributed File System (DFS) link that uses multiple replicating targets.

46. AD CS is configured on Server1 as a standalone CA. What two actions should you do to audit changes to the CA configuration settings and the CA security settings?
Deploying a WSUS server in replica mode at the Branch office. You can also configure the WSUS in replica mode/split - this will allos the WSUS server to download list of updates from the parent but download the actual updates directly from Windows up
1) Enable the Audit object access setting in the Local Security Policy for Srv1. 2) Configure auditing in the Certification Authority snap-in.
Dynamically expanding VHD's
Install From Media IFM

47. In order to ensure highly available Windows Update servers you should create this.
Network Load Balancing (NLB) Cluser for the front end WSUS servers. This will allow users to have the continued access in the event that WSUS servers become unavailable.
DSMOD - ADUC
Ntdsutil
Add the IT Help Desk Users to the Group Policy Creator Owners group and then create a new Starter GPO.

48. If you need to delegate control of server to remote admins group
Perform an authoritative restore
Deploy the application via RemoteApp as an .MSI file and enable File Extension Take over.
Execute the Set-ADServiceAccount cmdlet
Configure RODC for Administrator Role Separation

49. UPN Suffix xxxx.com needs to be available for user accounts...
PDC emulator with w32tm.exe
Add the new UPN Suffix to the forest
You could restore the backup to an alternate location. Then mount the database using the AD Database Mounting Tool (Dsamain.exe)
Microsoft System Center Data Protection Manager

50. All DCs run Windows Server 2008 R2 and have the DNS Server role installed. The domain controllers for each location are stored locally. Each has its own standard primary zone to support its local domain.You need a plan that meets the following: WAN l
Install Windows Server Backup and modify the Windows firewall settings
Configure separate application pools for each application
Create a standard secondary of domain and create standard secondary of other domain.
Move "Infrasture Master" role in child domain to a DC that does not hold the Global Catalog.