SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
MSITP
Start Test
Study First
Subjects
:
certifications
,
msitp
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. To allow administrators to create and store .ADMX templates in a way that allows them to have access to the template no matter what administrative computer they logon to you must
Registry on users computer needs to be modified
The WSUS client to retrieve updates from Microsoft Update (Do not Store updates locally)
Create a Central Store
Deploy an off-line standalone Root CA - deploy an on-line Enterprise Subordinate CA - and deploy an on-line standalone Subordinate CA.
2. If you need to ensure that data is protected by BitLocker then you will...
Add the new UPN Suffix to the forest
FILES option within Ntdsutil
Network Load Balancing (NLB)
NOT be able to store that data on an iSCSI SAN
3. In order to reduce the administrative overhead typically involved with viewing event logs across multiple servers you should implement this.
Configure caching on the shared folder and configure offline files to use encryption
Enable Windows Remote Management (WinRM) on the servers.
Reinstall AD DS on DCC.company.com as a WRITABLE DC.
Event Log Subscriptions
4. If you need to deploy multiple servers through automation of installation and activation and minimize network traffic
Configure folder redirection
Then use Key Management Service (KMS) - DHCP server - and Windows Deployment Services.
Modify the schema of LDSInst1
Implement a domain-based DFS namespace and add a second namespace server; Enable the "Clients fail back to preferred targets" option. Make sure all client computers have at least XP SP2.
5. RDSRv1 is a Server 2008 R2 Remote Desktop Session Host. RDSrv1 has 8 custome apps installed. Each is configured as a RDP RemoteApp. You notice that when a user runs one of the apps - other users report that the server seems slow and that some apps be
802.1.x NAP
Implement Windows System Resource Manager (WSRM)
Restore-ADObject cmdlet
Upgrading DFS to Windows Server 2008 R2
6. To ensure that user's documents are stored on the file server and thus subject to the corporate backup solution - you should implement this.
Folder redirection. Folder redirection is also useful when using roamin profiles.
Ntfrsutil
Distributed File System (DFS) Replication
Site
7. 4 steps to perform offline Defragmentation of AD database...
Microsoft Application Virtualization (AppV)
Copy the ADMX files from your company's PDC emulator to the PolicyDefinitions folder on other company's PDC emulator.
Execute the Active Directory Diagnostics Data Collector Set and then review the report.
1) Stop AD services service 2) Compact ntds.dit 3) Move to %windir% ntds 4) Start AD domain services service
8. To enable the AD Recycle Bin
Enable - ADoptionalFeature cmdlet
Run the Delegation of Control Wizard on the Staff OU
Run the Delegation of Control Wizard on Sales OU. In Group Policy Management Console - modify the permissions of the Group Policy Objects container in the hr.domain.com domain.
From Server A - run Create Basic Task Wizard
9. You need to recommend a server configuration to support a Web-based application that must meet these requirements: the app must be available to all users if a single server fails; support the installation of .NET applications; Minimize software costs
Install the full installation of Windows Server 2008 R2 Web Edition on two servers - and configure them in a Network Load Balancing cluster
In each office - install a WSUS server and configure the WSUS servers as a replica of the main office.
Recommend Group Policy preferences
Install the Remote Server Administration Tools (RSAT) on the Windows 7 computers.
10. If you need a VPN soluction that stores VPN passwords as encrypted text and supports automatic enrollment of certificates
The computer must be connected to the network when the end user clicks the icon and launches the install of the application.
Migrate the namespace to Windows SErver 2008 mode and enable access based enumeration (ABE). NOTE: ABE is a new feature in SERVER 2008; this requires that all DFS Server be 2008 or later.
Then Upgrade clients to Win7 - implement Enterprise CA on Win 2008 R2 and implement IPSec VPN with cert-based authentication.
WSUS server running in replica mode that is configured to download updates from Microsoft Update (a.k.a. replica split)
11. Your AD domain has an OU named Sales OU that contains the user accounts of the Sales department. A new password polity needs to be created for the Sales department that is different from the domain password policy. How is this accomplished?
Add all the sales user accounts into a new global security group. Create a new Password Policy Object (PSO) and apply it to the group.
Perform an authoritative restore
On one server - create event subscriptions for each server...on the server - attach tasks to the application error events
Windows Server 2003
12. You need to create a DNS infrastructure that must allow client computers in each office to register DNA names within their respective offices and client computuers must be able to resolve names for hosts in all offices
Implement a GPO for each domain
Install the full installation of Windows Server 2008 R2 Web Edition on two servers - and configure them in a Network Load Balancing cluster
Move "Infrasture Master" role in child domain to a DC that does not hold the Global Catalog.
Create an Active Directory-Integrated zone.
13. You need a solution that replaces servers that host 2 applications. This solution must use Windows Server 2008 R2 and minimize cost.
Back up to an external USB drive by using Windows Server Backup
Install a new server that runs a 64-bit version of Windows Server 2008 R2 Enterprise Edition. Install the Hyper-V role. Install the App1 and App2 in separate child virtual machines.
Add the Remote1-Admins group to the Administrators local group on each server in Remote1.
Network Load Balancing (NLB) cluster
14. You need to recommend a Windows update strategy for the new branch office. The branch office has a 512 Kbps connection the corporate office and a 2 MB connection to the Internet. You should recommend this.
Deploy a GPO to the WebSrvOU
Multipath I/O feature
Attach VHD file created by Windows server backup
Deploying a WSUS server in replica mode at the Branch office. You can also configure the WSUS in replica mode/split - this will allos the WSUS server to download list of updates from the parent but download the actual updates directly from Windows up
15. George's user account has been deleted in Active Directory. George's user account needs to be restored by usine minimal amount of effort. What should be done?
Deploy a failover cluster that contains one node in each office.
Perform an authoritative restore
DSMOD - ADUC
Modify properties of RODC server computer account.
16. GPO setting to prevent all users from running an application
IIS Manager user account
Configure a server with the Remote Desktop Services role and install Outlook 2003 on the Remote Desktop Services server. Then publish Outlook 2003 as a Remote Desktop Services RemoteApp (RD RemoteApp).
The computer must be connected to the network when the end user clicks the icon and launches the install of the application.
Software Restriction Polices
17. to ensure that users can ONLY view the list of DFS Targets to which they are assigned permissions
New ACCOUNT STORE should be added and configured
Your machine and remote desktops
Migrate the namespace to Windows SErver 2008 mode and enable access based enumeration (ABE). NOTE: ABE is a new feature in SERVER 2008; this requires that all DFS Server be 2008 or later.
Raise the DFL to Windows Server 2008 R2.
18. To determine size of AD database file...
Discover the run Microsoft Baseline Security Analyzer (MBSA)
View properties of %systemroot%ntdsntds.dit
Configure event log subscriptions
Win2000
19. To prevent account password from being cached on RODC server...
AD Rights Management Services
Windows XP Mode
Modify properties of RODC server computer account.
Active Directory Right Management Services (AD RMS)
20. You are evaluating whether to use express installation files as an update distribution mechanism. The technical requirement that
newly implemented technologies must have a minimal effect on LAN traffic - is met by using express installation files
Create a user and designate him as a recovery agent by issuing him a data recovery certificate.
Install WSUS 3.0 on a 2008 R2 server and configure Windows Update by using a GPO
Modify zone transfer settings for company.com zone on DCA
21. Ensure password length for a group set to 12 characters long while others keep password policy
Add-ADFineGrainedPasswordPolicySubject cmdlet
Install a Server Core installation of Windows Server 2008 R2 Enterprise. Note: Remember clusters must be either 2008 Enterprise or Datacenter - you cannot build a Microsoft Cluster using Web or Standard Editions
Incoming external trust
Deploy the application via RemoteApp as an .MSI file and enable File Extension Take over.
22. There's an AD domain named company.com. There are 3 DC's that also hold the DNS server role which host an ADI zone named company.com. This zone is configured to update settings to Secure only Dynamic Updates. The CIO has issued a new security policy
Then use Key Management Service (KMS) - DHCP server - and Windows Deployment Services.
1) Remove the Auth Users account from the Secutiy tab of the company.com DNS zone properties. 2) Assign the server computer accounts to the Allow on Create All Child Objects permission on the Security tab of the company.com DNS zone properties.
Install a Server Core installation of Windows Server 2008 R2 Enterprise. Note: Remember clusters must be either 2008 Enterprise or Datacenter - you cannot build a Microsoft Cluster using Web or Standard Editions
Active Directory Domains and Trusts
23. 3 servers are configured as DNS servers and are ADI for the company.com zone. DNS only allows for secure updates - but you need to enable dynamic DNS updates on DCC.company.com...What do you do?
Reinstall AD DS on DCC.company.com as a WRITABLE DC.
Restore-ADObject cmdlet
Establish a Federated Trust between your company and the external partner. Deploy a 2008 R2 server that runs MIcrosoft SharePoint 2010 and that has the Active Directory Rights Management Services (AD MS) role installed.
Deploy a two-node cluster. Connect an external storage subsystem. Configure the external subsystem as a RAID 10 array - and format the array as a GPT disk.
24. To minimize the amount of storage used for virtual machines in a Virtual desktop pool the VHD's should be
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
25. You need to ensure that your Windows 2008 R2 file servers meet the following: supports volumes larger than 2 terabytes - if a single disk fails - maintain data redundancy - if a single server fails - maintain access to all data - maximize disk throug
Deploy a two-node cluster. Connect an external storage subsystem. Configure the external subsystem as a RAID 10 array - and format the array as a GPT disk.
Add George to the Domain Admins group.
Configure Audit Special Logon and define Special Groups
Recommend one AD based service account for each web site in each domain - that would mean 10 total. NOTE: Because you're using AD accounts that there is one web site in each domain the number of service accounts will match the number of domains.
26. You need to devise a security solution so that after 15 days the documents distributed to the members of the School Board can only be opened by the creator owners in the high school year book department. You should recommend...
IIS Chared Configuration
SSTP is a good solution if you have Vista SP1 or higher and your security team has already opened port 443 on the firewall and the coporate security policy states that they would prefer not to open any more ports on the firewall than necessary. SSTP
Congifure the new Local User and Groups by using Group Policy Preferences option and link the policy to the Branch office site.
Active Directory Right Management Services (AD RMS)
27. Two different solutions are available to help assign IP addresses to remote clients that need to VPN or Dial-in to the branch office.
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
28. You need an Active Directory strategy that supports the recovery of deleted objects for up to one year after the date of deletion. to accomplish this
Encrypting File System (EFS). This can be enabled locally or through a GPO.
Configure event log subscriptions
Increase the tombstone lifetime for the forest.
Service user account for AD LDS
29. You are upgrading only a few computers in one department to Windows 7. These computers are running a legacy XP application you should recommend...
Configure RADIUS accounting by using local file loggin on each server. Store the log files in an Internet Authentication Service (IAS) format on a shared folder on one of the servers (Srv1).
Install a new server that runs a 64-bit version of Windows Server 2008 R2 Enterprise Edition. Install the Hyper-V role. Install the App1 and App2 in separate child virtual machines.
Windows XP Mode
From Server1 - run the Create Basic Task Wizard
30. An AD LDS instance needs to be replicated from one server to another...
Service user account for AD LDS
Event Subscriptions
Network Load Balancing (NLB)
Apply a WMI Filter to the policy. Note: You can use a WMI filter to filter out VM from being affected by a GPO the same way you can a physcial machine.
31. To identify users who bypass the new corporate security policy -
Software Restriction Polices
Configure RADIUS accounting by using local file loggin on each server. Store the log files in an Internet Authentication Service (IAS) format on a shared folder on one of the servers (Srv1).
Configure Audit Special Logon and define Special Groups
Software Restriction Polices
32. Tool to change Directory Services Restore Mode password on Domain Controller...
Role Separation
ntdsutil
MEDV to deploy virtual desktops
Microsoft System Center Data Protection Manager 2010
33. Tool to allow a user to administer an RODC while minimizing the number of permissions assigned to user.
Upgrade one of the Server 2003 servers to Server 2008 R2. On this server - implement the Remote Desktop Services Gateway (RD Gateway) role and configure a Remote Desktop Services Resource authorization policy (RD RAP).
IIS Chared Configuration
Dsmgmt
Configure folder redirection
34. UPN Suffix xxxx.com needs to be available for user accounts...
Service user account for AD LDS
Enhanced Storage Access settings in Group Policy on the local machine to require a unique vendor ID to identify the device or even require a certificate for the device to connect to your machine. This policy can even lock the device when the computer
DFL needs to be Windows Server 2008
Add the new UPN Suffix to the forest
35. Company users IPV4 and IPV6. A PC uses IPV6 and can no longer authenticate off the DC. What can be done to ensure IPV6 computers authenticate to DCs in same site...
Subnet object needs to be created
Assign the application to all client computers by using a GPO.
Event Viewer
Configure RADIUS accounting by using SQL loggin on each server and use Srv1 as database for RADIUS aaccounting.
36. You need a solution that allows your users to collaborate with each other and that must meet these: enables - full text indexing of all user content - remote access to files by using a Web browser - secure access to files by assigning permisions; sup
Deploy a GPO to the WebSrvOU
Include a server that runs Microsoft Office SharePoint Server 2010
Service user account for AD LDS
Create ADMX and ADML files. Configure the GPO and link it to the domain.
37. To ensure that the SQL Servers can fail over autoatically and support 2 TB drives
Recommend GPT and basic disks
A relying party trust should be created.
Enable Credential Roaming
Execute the Active Directory Diagnostics Data Collector Set and then review the report.
38. Deployment of 10 WSUS servers across 10 branch office will take place over a three month period. The bandwidth between the corporate office and the branch offices must be minimized due to budget contraints within the company. Admins in the corporate
Microsoft Desktop Optimization Pack (MDOP) to your company
WSUS servers running in replica mode - and configure them to download updates from the WSUS server in the main office
Disable Site Link Bridging from IP Properties
Copy the ADMX files from your company's PDC emulator to the PolicyDefinitions folder on other company's PDC emulator.
39. All servers use internal storage only. Srv1 is a Server 2008 R2 file server. you need to deploy a client/server application so that it is available if a single server fails. To achieve this while minimizing cost
Create TWO new starter GPO's one with user administrative templates configure - and one with computer admin template configured - and export them to .cab files - and make the .cab files available in both forests...Then when creating new group policie
Deploy a failover cluster that uses Node and File Share Disk Majority
One Remote Desktop connection authorization policy (RD CAP) and two Remote Desktop resource authorization polices (RD RAPs)
Install the File Server Resource Manager (FSRM) role service on the sales department file server. Configure hard quotas and file screening.
40. SrvA has Remote Desktop Services role installed. You notice that users are consuming more than 40% of CPU resources. You want to prevent them from consuming more than 10% - however - administrators should not be limited.
Create an Active Directory-Integrated zone.
Get-ADUser cmdlet
Implement Windows System Resource Manager (WSRM) and configure user policies
Then use Windows Deployment Services (WDS) on DHCP1.
41. An external partner plan requires the following: prevent sensitive documents from being forwarded to untrusted recipients or from being printed; allow users in the external partner organization to access the protected content to which they have been
Microsoft System Center Data Protection Manager 2010
Windows System Resource Manager (WSRM)
Add the user to the Domain Admins global group
Establish a Federated Trust between your company and the external partner. Deploy a 2008 R2 server that runs MIcrosoft SharePoint 2010 and that has the Active Directory Rights Management Services (AD MS) role installed.
42. DCA is DC and DNS server that holds ADI zone for company.com DNSB is member server that has DNS server role installed. What should be done so DNSB can get zone updates from DCA?
Deploy two writable domain controllers in ad.company.com and recommend to configure both domain controllers as GC's.
Modify zone transfer settings for company.com zone on DCA
One Remote Desktop connection authorization policy (RD CAP) and two Remote Desktop resource authorization polices (RD RAPs)
Enable Windows Remote Management (WinRM) on each server.
43. You have 2 Server Core servers that are part of a Network Load Balance that host a web site. To be able to allow administrators - on their Windows 7 computers - remotely manage the NLB with automation
Add the Windows Server Backup feature and Windows System Image recovery.
Implement Windows System Resource Manager (WSRM)
AD RMS
Enable Windows Remote Management (WinRM) on the servers.
44. Minimal FFL needed to deploy an RODC that runs Windows Server 2008 R2...
Use a GPO to configure device installation restrictions
Network Load Balancing (NLB) Cluser for the front end WSUS servers. This will allow users to have the continued access in the event that WSUS servers become unavailable.
WDS
Windows Server 2003
45. to minimize the attack surface area of the servers and reduce licensing cost you should recommend
Multipath I/O feature
Configure block inheritance on the IT OU
Attach VHD file created by Windows server backup
Installing Hyper-V on a Server Core installation of Windows Server 2008 R2 Enterprise
46. You have been tasked with backing up all the GPOs in the domain. The IT manager also wants you to minimize the size of the backup. You decide to use...
You could restore the backup to an alternate location. Then mount the database using the AD Database Mounting Tool (Dsamain.exe)
Converting physical servers to VMs - implementing SANn and SAN management components such as backup and site resiliency will create additional administrative overhead.
Prestage the computer account in AD
The Group Policy Management console
47. In order for admins at a branch office to be able to change their passwords and logon if a single DC fails even if the WAN Link to the corporate office fails you shoud
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
48. You have few Server 2003 servers that have Terminal services installed. You also have a firewall that runs ISA Server 2006. Your remote access strategy for the terminal servers needs to meeet the following: restricts accsss to specific Remote Desktop
Data Recovery Agent
Recommend Offline Files
Upgrade one of the Server 2003 servers to Server 2008 R2. On this server - implement the Remote Desktop Services Gateway (RD Gateway) role and configure a Remote Desktop Services Resource authorization policy (RD RAP).
Administrative Role Separation
49. The ability to set quotas at the volume level has been around for many years - however if you have have servers that need quotas - but instead of placing the quota at the volume level you need to place the quota on an individual folder -
Store all sensitive files in EFS encrypted folders and require home users to access the files by using SSTP
newly implemented technologies must have a minimal effect on LAN traffic - is met by using express installation files
Deploy a standalone DFS namespace; Enable access-based enumeration and use DFS Replication
Implement File Server Resource Manager (FSRM) quotas on the desired servers
50. You need to deploy a sales application that only the sales users must have access to
dsa.msc - dsamain.exe - ntdsutil.exe
Install From Media IFM
Deploy a GPO for the Sales OU
Microsoft SharePoint Foundation 2010
Can you answer 50 questions in 15 minutes?
Let me suggest you:
Browse all subjects
Browse all tests
Most popular tests
Major Subjects
Tests & Exams
AP
CLEP
DSST
GRE
SAT
GMAT
Certifications
CISSP go to https://www.isc2.org/
PMP
ITIL
RHCE
MCTS
More...
IT Skills
Android Programming
Data Modeling
Objective C Programming
Basic Python Programming
Adobe Illustrator
More...
Business Skills
Advertising Techniques
Business Accounting Basics
Business Strategy
Human Resource Management
Marketing Basics
More...
Soft Skills
Body Language
People Skills
Public Speaking
Persuasion
Job Hunting And Resumes
More...
Vocabulary
GRE Vocab
SAT Vocab
TOEFL Essential Vocab
Basic English Words For All
Global Words You Should Know
Business English
More...
Languages
AP German Vocab
AP Latin Vocab
SAT Subject Test: French
Italian Survival
Norwegian Survival
More...
Engineering
Audio Engineering
Computer Science Engineering
Aerospace Engineering
Chemical Engineering
Structural Engineering
More...
Health Sciences
Basic Nursing Skills
Health Science Language Fundamentals
Veterinary Technology Medical Language
Cardiology
Clinical Surgery
More...
English
Grammar Fundamentals
Literary And Rhetorical Vocab
Elements Of Style Vocab
Introduction To English Major
Complete Advanced Sentences
Literature
Homonyms
More...
Math
Algebra Formulas
Basic Arithmetic: Measurements
Metric Conversions
Geometric Properties
Important Math Facts
Number Sense Vocab
Business Math
More...
Other Major Subjects
Science
Economics
History
Law
Performing-arts
Cooking
Logic & Reasoning
Trivia
Browse all subjects
Browse all tests
Most popular tests