Q1. You have a System Center 2012 R2 Configuration Manager Service Pack 1 (SP1) deployment.
Hardware inventory is enabled for all of the Configuration Manager clients.
You create a device collection named Finance. All of the client computers in the finance department are members of the Finance collection.
You need to include Trusted Platform Module (TPM) information in the hardware inventory of the finance department computers.
Which object should you configure in Configuration Manager?
A. Hardware Requirements
B. Custom Client Device Settings
C. Network Discovery
D. a configuration item
E. a computer association
Answer: D
Explanation: Example:
We are going to use Desired Configuration Management to run a script on target machines.
The script will run on a regular schedule and place Bitlocker data into a new WMI class
named SCCM_Bitlocker. Then, we will SCCM extend hardware inventory so that it collects data from this new class.
Compliance Rules Setting First, we will need to create a configuration baseline, a configuration item and two compliance rules.
Reference: Tracking Bitlocker Status using SCCM 2012 https://winventures.wordpress.com/2013/09/18/tracking-bitlocker-status-using-sccm-2012/
Q2. DRAG DROP
Your network contains a System Center 2012 Configuration Manager environment.
Your company has a security policy that contains mandatory registry settings for all
servers.
You have a collection named Servers that contains all of the servers.
You need to identify which servers do not comply with the security policy.
What should you do?
To answer, move the four appropriate actions from the list of actions to the answer area
and arrange them in the correct order.
Answer:
Q3. You network contains a System Center 2012 R2 Configuration Manager Service Pack 1 (SP1) environment.
You have an application named App1.
You need to ensure that users in the finance department can install App1 by using the Application Catalog.
What should you do?
A. Create a required user deployment and target the deployment to all of the finance department users.
B. Create a required user deployment and target the deployment to all of the client computers in the finance department.
C. Create an available user deployment and target the deployment to all of the finance department users.
D. Create an available user deployment and target the deployment to all of the client computers in the finance department.
Answer: C
Explanation:
By selecting "Available" it will be selectable for the users in the Application Catalog. The "Required" option would force the installation to all users in the finance department.
Reference: How to Deploy Applications in Configuration Manager
http://technet.microsoft.com/en-us/library/gg682082.aspx
Note: To deploy an application
...
8. On the Deployment Settings page of the Deploy Software Wizard, specify the following information:
*
Action – From the drop-down list, choose whether this deployment is intended to Install or Uninstall the application.
*
Purpose – From the drop-down list, choose one of the following options:
*
Available - If the application is deployed to a user, the user sees the published application in the Application Catalog and can request it on demand. If the application is deployed to a device, the user will see it in the Software Center and can install it on demand.
*
Required - The application is deployed automatically according to the configured schedule. However, a user can track the application deployment status if it is not hidden,
and can install the application before the deadline by using the Software Center.
Q4. Your network contains an Active Directory forest named litwareinc.com.
The forest has a single domain.
The forest contains a System Center 2012 Configuration Manager environment.
The environment contains a single primary site.
You create a group named InstallTechs.
You need to ensure that the members of InstallTechs can deploy Applications to desktop computers by using Configuration Manager.
The solution must minimize the number of permissions assigned to InstallTechs.
What should you do?
A. Assign the Application Administrator security role to InstallTechs. Create a new collection that contains all of the desktop computers. Scope InstallTechs to the new collection.
B. Assign the Application Deployment Manager security role to InstallTechs. Create a new collection that contains all of the desktop computers. Scope InstallTechs to the new collection.
C. Add the Application Deployment Manager security role to InstallTechs. Create a new collection that contains computers. Add InstallTechs to the local Administrators group on each desktop computer.
D. Assign the Application Administrator security role to InstallTechs. Create a new collection that contains all of the desktop computers. Add InstallTechs to the local Administrators group on each desktop computer.
Answer: B
Explanation:
http://technet.microsoft.com/en-us/library/hh524341.aspx
Glossary for Microsoft System Center 2012 Configuration Manager Application Administrator A security role that grants permissions to administrative users so that they can perform both the Application Deployment Manager role and the Application Author role. Application Deployment Manager A security role that grants permissions to administrative users so that they can deploy and monitor applications. http://blogs.technet.com/b/hhoy/archive/2012/03/07/role-based-administration-in-system-center-2012-configuration-manager.aspx
Role-Based Administration in System Center 2012 Configuration Manager In Configuration Manager 2012, Security Roles are used to collectively group objects and permissions (operations) for assignment to an Administrator. Instead of an individual permission set on a single instance of object, the Security Role provides a single Role assignment to an administrator; reducing the overall complexity with permission management. An “object” in the Security Role is something that you want to manage access to and “permission” is the operational functions, such as Read, Modify and Delete.
Q5. Your network contains a System Center 2012 Configuration Manager environment.
You write the following query: Select SYS.Name from SMS_R_System SYS Join SMS_G_System_ADD_REMOVE_PROGRAMS ARP On ARP.ResourceId = SYS.ResourceId
You need to create a list of all the client computers that have a version of Visual Studio installed.
What should you add to the query?
A. where ARP.DisplayName like "Visual Studio*"
B. where ARP.DisplayName = "*Visual Studio*"
C. where ARP.DisplayName = "%%Visual Studio"
D. where ARP.DisplayName like "Visual studio%"
Answer: D
Explanation: You need to use "LIKE" not "=" otherwise the WildCard "%" is seen as a real identifier.
Q6. Your network contains a System Center 2012 Configuration Manager environment. You have a sales department that contains 500 employees, 20 of whom are sales
managers. Each sales department employee has a desktop computer that is configured as
their primary device.
The sales managers frequently log on to computers in the marketing department.
You plan to deploy a new sales application named App1.
You need to ensure that App1 is only available to the sales department employees when
they log on to their primary device.
What should you do?
A. In a requirement rule, set Organization Unit = Sales.
B. In Client Settings, set Allow user to define their primary devices to False.
C. In a requirement rule, set Primary Device = True.
D. In Client Settings, set Allow user to define their primary devices to True.
Answer: C
Explanation:
http://technet.microsoft.com/en-us/library/gg699365.aspx How to Manage User Device Affinity in Configuration Manager
You can define primary devices. These are typically the devices that users use on a daily basis to perform their work. When you create an affinity between a user and a device, you gain more software deployment options. For example, if a user requires Microsoft Office Visio, you can install it on the user’s primary device by using a Windows Installer deployment. However, on a device that is not a primary device, you might deploy Microsoft Office Visio as a virtual application. You can also use user device affinity to predeploy software on a user’s device when the user is not logged in. Then, when the user logs on, the application is already installed and ready to run.
Reference: How to Manage User Device Affinity in Configuration Manager
http://technet.microsoft.com/en-us/library/gg699365.aspx
Q7. Your network contains a System Center 2012 Configuration Manager environment that contains six servers configured as shown in the following table:
Server5 and Server6 are in the perimeter network, while Server1, Server2, Server3, and Server4 are in the internal network.
Administrators currently apply software updates to servers manually.
You discover that Server4 was never updated.
You need to centrally manage software updates for all of the servers by using
Configuration Manager.
What should you do first?
A. Install a management point on Server5.
B. Configure IIS to support only HTTPS on Server6.
C. Install a management point on Server2.
D. Install Network Load Balancing (NLB) on Server3.
E. Install an enrollment proxy point on Server6.
F. Configure IIS to support only HTTP on Server3.
G. Configure the Exchange connector on Server3.
H. Install Network Load Balancing (NLB) on Server6.
I. Install a PXE-enabled protected distribution point on Server5.
J. Install the Windows Cluster service on Server3.
K. Install a PXE-enabled protected distribution point on Server4.
L. Install the Windows Cluster service on Server6.
M. Install Windows Server Update Services (WSUS) on Server3.
N. Install a protected distribution point on Server1.
O. Install a software update point on Server3.
Answer: M
Explanation:
A WSUS service will simplify and automate software updates for all servers from a single management interface.
Note: The software update point is required on the central administration site and on the primary sites in order to enable software updates compliance assessment and to deploy software updates to clients. The software update point is optional on secondary sites. The software update point site system role must be created on a server that has WSUS installed.
Reference: Introduction to Software Updates in Configuration Manager
http://technet.microsoft.com/en-us/library/gg682168.aspx
.
Q8. Your network contains a single Active Directory forest named contoso.com.
Contoso.com contains three System Center 2012 Configuration Manager sites and one System Center Configuration Manager 2007 site.
You need to ensure that you can transfer objects from Configuration Manager 2007 to Configuration Manager 2012.
What should you do?
A. Assign the computer account of the Central Administration site server permission to the
Configuration Manager 2007 site.
Assign the computer account of the Central Administration site server permissions to the
Microsoft SQL Server database instance.
B. Extend the Active Directory schema and assign the Central Administration site server
permissions to the System\System Management container.
C. Connect the Configuration Manager 2007 primary site as a child primary site of the
Configuration Manager 2012 primary site.
D. Connect the Configuration Manager 2012 primary site as a child primary site of the
Configuration Manager 2007 primary site.
Answer: A
Explanation:
For a System Center 2012 Configuration Manager source site, this account requires Read permission to all source site objects, you grant this permission to the account by using role-based administration.
Reference: Determine Whether to Migrate Configuration Manager 2007 to System Center 2012 Configuration Manager
http://technet.microsoft.com/en-us/library/gg712991.aspx
Note:
In Microsoft System Center 2012 Configuration Manager, the built-in migration functionality replaces in-place upgrades of existing Configuration Manager infrastructure by providing a process that transfers data from active Configuration Manager 2007 sites. The functionality provided by migration helps you maintain investments that you have made in configurations and deployments while you can take full advantage of core changes in the product introduced in System Center 2012 Configuration Manager. These changes include a simplified Configuration Manager hierarchy that uses fewer sites and resources, and the improved processing by use of native 64-bit code that runs on 64-bit hardware.
Migration can transfer most data from Configuration Manager 2007.
http://technet.microsoft.com/en-us/library/gg681981.aspx
Planning for Migration to System Center 2012 Configuration Manager
You must first install a System Center 2012 Configuration Manager hierarchy to be the destination hierarchy before you can migrate data from a supported source hierarchy.
After you install the destination hierarchy, configure the management features and functions that you want to use in your destination hierarchy before you start to migrate data.
http://technet.microsoft.com/en-us/library/gg712313.aspx
Prerequisites for Migration in System Center 2012 Configuration Manager
To migrate from a supported source hierarchy, you must have access to each applicable Configuration Manager source site, and permissions within the System Center 2012 Configuration Manager destination site to configure and run migration operations.
Required Configurations for Migration
..
Data Gathering
To enable the destination site to gather data, you must configure the following two source site access accounts for use with each source site:
*
Source Site Account: This account is used to access the SMS Provider of the source site.
*
For a Configuration Manager 2007 SP2 source site, this account requires Read permission to all source site objects.
*
For a System Center 2012 Configuration Manager source site, this account requires Read permission to all source site objects, you grant this permission to the account by using role-based administration.
*
Source Site Database Account: This account is used to access the SQL Server database of the source site and requires Read and Execute permissions to the source site database.
You can configure these accounts when you configure a new source hierarchy, data gathering for an additional source site, or when you reconfigure the credentials for a source site. These accounts can use a domain user account, or you can specify the computer account of the top-level site of the destination hierarchy.
...
Q9. Your company uses System Center 2012 Configuration Manager to distribute operating system images. The standard operating system for client computers is Windows 7 Enterprise (x86).
You receive 300 new desktop computers. Each computer has a new storage controller.
When you attempt to deploy an existing image to one of the computers, you receive an error message indicating that a storage device cannot be found during the pre-boot deployment phase.
You need to ensure that you can deploy Windows 7 to the new computers by using an image.
What should you do?
A. Import the storage drivers to the Drivers container and update the task sequence.
B. Create a new x64 boot image and configure the operating system image to use the x64 boot image.
C. Create a new driver package and update the task sequence.
D. Update the existing x86 boot image to include the storage drivers.
Answer: D
Explanation:
Planning a Device Driver Strategy in Configuration Manager You can add Windows device drivers that have been imported into the driver catalog to boot images. Use the following guidelines when you add device drivers to a boot image:
*
Add only mass storage and network adapter device drivers to boot images because other types of drivers are not generally required. Drivers that are not required increase the size of the boot image unnecessarily.
*
Add only device drivers for Windows 7 to a boot image because the required version of Windows PE is based on Windows 7.
*
Ensure that you use the correct device driver for the architecture of the boot image. Do not add an x86 device driver to an x64 boot image.
Reference: Planning a Device Driver Strategy in Configuration Manager
http://technet.microsoft.com/en-us/library/gg712674.aspx
Q10. Your company uses System Center 2012 Configuration Manager to deploy applications.
The company purchases a new application named App1. App1 can be installed only on client computers that run Windows 7.
You need to ensure that App1 is installed only on Windows 7 computers that have at least 2 Gb of memory and 300 Gb of free disk space.
What should you create?
A. a Query object
B. custom client user settings
C. a configuration baseline
D. requirement rules
Answer: D
Explanation:
http://technet.microsoft.com/en-us/library/gg682082.aspx How to Deploy Applications in Configuration Manager Before you can deploy an application in Microsoft System Center 2012 Configuration Manager, you must create at least one deployment type for the application. http://technet.microsoft.com/en-us/library/gg682174.aspx
How to Create Deployment Types in Configuration Manager
Steps to Create a Deployment Type
Step 1: Start the Create Deployment Type Wizard.
Step 2: Specify whether you want to automatically detect or to manually define the
deployment type information.
Step 3: Specify the content options for the deployment type.
Step 4: Configure the detection methods to indicate the presence of the application.
Step 5: Specify the user experience options for the deployment type.
Step 6: Specify the requirements for the deployment type.
Requirements are used to specify the conditions that must be met before a deployment
type can be installed on a client device.
Step 7: Specify the dependencies for the deployment type.
Step 8: Confirm the deployment type settings and complete the wizard.
Step 9: Configure additional options for the deployment types that contain virtual
applications.
http://technet.microsoft.com/en-us/library/gg682174.aspx#BKMK_Step61
Step 6: Specify Requirements for the Deployment Type
1. On the Requirements page of the Create Deployment Type Wizard, click Add to open the Create Requirement dialog box, and add a new requirement.
2. From the Category drop-down list, select whether this requirement is for a device or a user, or select Custom to use a previously created global condition. When you select Custom, you can also click Create to create a new global condition.
Important: If you create a requirement of the category User and the condition Primary Device, and then deploy the application to a device collection, the requirement will evaluate as false.
3. From the Condition drop-down list, select the condition that you want to use to assess whether the user or device meets the installation requirements. The contents of this list will vary depending on the selected category.
4. From the Operator drop-down list, choose the operator that will be used to compare the selected condition to the specified value to assess whether the user or device meets in the installation requirement. The available operators will vary depending on the selected condition.
5. In the Value field, specify the values that will be used with the selected condition and operator whether the user or device meets in the installation requirement. The available
values will vary depending on the selected condition and the selected operator.
6. Click OK to save the requirement rule and exit the Create Requirement dialog box.
7. On the Requirements page of the Create Deployment Type Wizard, click Next. http://technet.microsoft.com/en-us/library/gg682048.aspx How to Create Global Conditions in Configuration Manager In System Center 2012 Configuration Manager, global conditions are rules that represent business or technical conditions that you can use to specify how an application is provided and deployed to client devices.
Q11. Your network contains a System Center 2012 R2 Configuration Manager Service Pack 1 (SP1) environment. The hierarchy contains a Central Administration site named Site1 and a primary site named Site2.
You discover that none of the collections created on Site1 are displayed on Site2.
You need to identify whether there is a replication issue between the sites.
What should you review?
A. the Microsoft SQL Server replication diagnostic files
B. the Schedule.log file
C. the Colleval.log file
D. the Despool.log file
Answer: D
Explanation: Despool.log records incoming site-to-site communication transfers.
Incorrect:
Colleval.log logs when collections are created, changed, and deleted by the Collection
Evaluator.
Schedule.log records site-to-site job and package replication.
Reference: SCCM 2012: Log File Reference http://www.acupofit.com/2012/05/sccm-2012-log-file-reference.html
Q12. You manage a System Center 2012 R2 Configuration Manager Service Pack 1 (SP1)
deployment. The deployment contains a reporting services point.
You subscribe to all client status reports.
You need to subscribe to an Asset Intelligence report.
From where should you configure the subscription?
A. Reporting Services Configuration Manager
B. the Report Server Web service site
C. the Monitoring workspace from the Configuration Manager Console
D. SQL Server Configuration Manager
Answer: A
Explanation: The reporting services point site system role must be installed before software updates reports can be displayed. Reference: Prerequisites for Asset Intelligence in Configuration Manager https://technet.microsoft.com/en-us/library/gg712306.aspx
Q13. You manage s System Center 2012 R2 Configuration Manager Service Pack 1 (SP1) deployment.
You need to ensure that Configuration Manager clients can use the Application Catalog.
Which client settings should you configure?
A. Software Metering
B. Computer Agent
C. Software Deployment
D. Software Inventory
Answer: B
Explanation: Computer Agent has the Default Application Catalog website point setting. Configuration Manager uses this setting to connect users to the Application Catalog from Software Center. You can specify a server that hosts the Application Catalog website point by its NetBIOS name or FQDN, specify automatic detection, or specify a URL for customized deployments.
Reference: About Client Settings in Configuration Manager
https://technet.microsoft.com/en-us/library/gg682067.aspx#BKMK_ComputerAgentDeviceSettings
Q14. Your company uses System Center 2012 Configuration Manager to monitor compliance.
The company has a configuration baseline for each server that has the Web Server (IIS) server role installed.
A new corporate policy specifies that the maximum TCP window size for all of the Web servers must be 131,072 bytes.
You discover that the TCP window size is set in the following registry entry:
HKEY_LOCAL_ MACHINE\System\CurrentControlSet\Services\HTTP\Parameters
\MaxBytesPerSend
You need to generate an error message for all of the Web servers that do NOT comply with the corporate policy.
What should you do?
A. Add a new configuration item that has a registry value setting type to the configuration baseline.
B. Create a query-based collection that contains all of the Web servers, and then initiate an inventory collection.
C. Create a query that returns a list of all the Web servers, and then search the query results for the registry value.
D. Add a new configuration item that has an Internet Information Services (IIS) metabase setting type to the configuration baseline.
Answer: A
Explanation:
Compliance is evaluated by defining a configuration baseline that contains the configuration items that you want to evaluate and settings and rules that describe the level of compliance you must have.
Reference: Introduction to Compliance Settings in Configuration Manager
http://technet.microsoft.com/en-us/library/gg682139.aspx
Q15. Your network contains a System Center 2012 Configuration Manager environment. The hierarchy contains a Central Administration Site named Site1 and a primary site named Site2.
You discover that none of the packages created on Site1 are displayed in Site2.
You need to identify whether there is a replication issue between the sites.
What should you review?
A. the Inventoryagent.log file
B. the Rcmctrl.log file
C. the Microsoft SQL Server replication diagnostic files
D. the Despool.log file
Answer: B
Explanation:
Technical Reference for Log Files in Configuration Manager - Site Server and Site System
Server Logs rcmctrl.log :
Site server log file
Records the activities of database replication between sites in the hierarchy.
Reference: http://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_SiteSiteServerLog
Q16. HOTSPOT
Your network contains a single Active Directory named contoso.com. A System Center 2012 R2 Configuration Manager Service Pack 1 (SP1) primary site named S01 is deployed to contoso.com.
The Configuration Manager deployment includes the servers configured as shown in the following table.
The distribution point is configured to require HTTPS for client communications.
You have a domain computer named Computer1 that runs the 64-bit version of Windows
8.1.
You need to install the Configuration Manager client on Computer1 manually.
Which network location should you use to start the installation? To answer, select the
appropriate options in the answer area.
Answer: