Introducing The New!
Surepassexam Collection
Get Unlimited Access to all
Surepassexam's PREMIUM files
Q1. HOTSPOT - (Topic 4)
A company has client computers that run Windows 7.
You need to secure a virtual private network (VPN) connection on the client computers so that two-factor authentication is used.
Which setting should you choose? (To answer, select the appropriate setting in the work area.)
Answer:
Q2. - (Topic 3)
You have two computers named Computer1 and Computer2 that run Windows 7. The network is configured as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that both computers can connect to the Internet.
What should you do?
Exhibit:
A. On both computers, set the subnet mask to 255.255.255.255.
B. On both computers, set the default gateway to 192.168.0.254.
C. On both computers, set the default gateway to 131.107.0.254.
D. On the internal interface of the firewall and on both computers, set the subnet mask to 255.255.0.0.
Answer: B
Explanation: Need to make the default gateways for both computers match the Internal IP Address of the Firewall.
Q3. - (Topic 6)
Your company has Windows 7 Enterprise computers that do not have a Trusted Platform Module (TPM) installed.
You need to enable BitLocker drive encryption on the operating system drives.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Create a USB startup key.
B. Configure the Require additional authentication at startup group policy setting.
C. Create a network key location.
D. Configure the Allow enhanced PINs for startup group policy setting.
Answer: A,D
Explanation: Ref: http://technet.microsoft.com/en-us/library/ee424319(v=WS.10).aspx
Q4. - (Topic 3)
You have a computer named Computer1 that runs Windows 7. You have a server named Server1 that runs Windows Server 2008.
Computer1 and Server1 have IPv4 and IPv6 installed.
You need to identify whether you can connect to Server1 by using IPv6.
What should you do?
A. Run Ping Server1 -6.
B. Run Ping Server1- n 6.
C. Run Net view \\Server1.
D. Open \\server1 from the Run dialog box.
Answer: A
Explanation:
Ping The Ping tool is still widely used, although more firewalls block Internet Control Message Protocol (ICMP) echo requests than used to be the case. However, even if you cannot get past a firewall on your organization's network, Ping is still useful. You can check that the IPv4 protocol is working on a computer by entering ping 127.0.0.1. You can then ping the IPv4 address of the computer. You can find out what this is by using the Ipconfig tool. If your computer has more than one interface combined in a network bridge, you can ping the Ipv4 address of the network bridge. When you have established that you can ping your computer using an Ipv4 address, you can test that DNS is working internally on your network (assuming you are connected to a DNS server, a WAP, or have ICS configured on your network) by pinging your computer name—for example, entering ping canberra. Note that if DNS is not implemented on your system, ping canberra still works because the IPv6 link-local address resolves automatically. -6 Force using IPv6.
Q5. HOTSPOT - (Topic 6)
A law firm's wireless network does not use IPv6 and provides IP addresses automatically to connected clients.
A visiting attorney arrives to perform a deposition. The attorney's computer has never connected to the firm's wireless network. The attorney needs general access to several websites but is unable to connect to the Internet.
You collect information from the computer's Device Manager, Network Connections, and Wireless Network Connections.
Device information is shown in the Device Manager exhibit. (Click the Exhibit button.)
Network information is shown in the Network Connections exhibit. (Click the Exhibit button.)
Wireless network information is shown in the Wireless Network Connections exhibit. (Click the Exhibit button.)
You need to configure this attorney's laptop so it can access the Internet through the firm's wireless network.
Consider each of the following statements. Does the information in the three screenshots support the inference as stated? (This question is worth three points.)
Answer:
Q6. - (Topic 5)
You use a computer that has Windows 7 SP1 installed to access your company's internal website. The website requires a secure connection. The certificate is a self-signed Secure Socket Layer (SSL).
You attempt to connect to the internal website. You receive the following error message:
"There is a problem with this website's security certificate."
You need to be able to connect to the internal website successfully.
What should you do?
A. From Internet Explorer, add the website to the Local Intranet zone.
B. From Certificate Manager, import the website's certificate into your Intermediate Certification Authorities store.
C. From Certificate Manager, import the website's certificate into your computer's Personal store.
D. From Internet Explorer, add the website to the Trusted Sites zone.
Answer: C
Q7. - (Topic 4)
You create a new virtual hard disk (VHD) on a Windows 7 Enterprise computer. Then you install Windows 7 on the VHD.
After you reboot the computer, the Windows 7 boot menu shows two different Windows 7 installations titled "Windows 7".
You need to ensure that the Windows 7 boot menu differentiates between the two Windows 7 installations.
What should you do?
A. Add a boot image in WDS.
B. Run the ImageX command with the /Mount parameter.
C. Run thePEImg/Prep command.
D. Use Sysprep with ar\ answer file and set the UpdatelnstalledDrivers option in the answer file to No.
E. Run the DiskPart command and the Attach command option.
F. Create a capture image in WDS.
G. Run the Dism command with the /Mount-Wimoption.
H. Run the BCDEdit command.
I. Run the Dism command with the /Add-Package option.
J. Run the Dism command with the /Add-Driver option.
K. Use Sysprep with an answer file and set the PersistAllDevicelnstalls option in the answer file to False.
L. Use Sysprep with an answer file and set the UpdatelnstalledDrivers option in the answer file to Yes.
M. Use Sysprep with an answer file and set the PersistAllDevicelnstalls option in the answer file to True.
N. Run the Start /w ocsetup command.
Answer: H
Q8. - (Topic 3)
You have a computer that runs Windows 7.
You install a third-party Web browser.
You discover that HTML files are no longer associated with Windows Internet Explorer.
You need to ensure that Internet Explorer starts whenever a HTML file is opened.
What should you do from Internet Options?
A. Open the Connections tab and click Setup.
B. Open the General tab and click Use default.
C. Open the Programs tab and click Make default.
D. Open the Programs tab and click Manage add-ons.
Answer: C
Explanation:
Change your default web browser
This information applies to Internet Explorer 8 or Internet Explorer 7 running on Windows 7,
Windows Vista, Windows Server 2008, Windows XP Service Pack 2 and Service Pack 3, and Windows Server 2003.
To make Internet Explorer your default web browser
1. Click to open Internet Options.
2. Click the Programs tab, and then click Make default.
Q9. - (Topic 5)
You administer client computers that have Windows 7 Enterprise installed for the marketing department of your company. The client computers are members of a single Active Directory domain. All regular client computer user accounts are members of the domain security group named Marketing.
You install a new printer on one of the client computers. You remove the Everyone group from the access control list (ACL) for the printer, and then share the printer.
You need to achieve the following goals:
. Prevent members of the Marketing group from modifying the print jobs of other users.
. Ensure that members of the Marketing group can modify the print jobs that they submit.
What should you do?
A. Modify local Group Policy on the desktops and disable the Point and Print Restrictions user right to the Marketing group.
B. From the printer's properties, assign the Print permission to the Marketing group.
C. From the printer's properties, assign the Manage Documents permission to the Marketing group.
D. Modify local Group Policy on the desktops and assign the Take ownership of files or other objects user right to the Marketing group.
Answer: B
Q10. - (Topic 4)
A company has client computers that run Windows 7 Enterprise.
A user has saved files in a C:\Users\ folder that coworkers must be able to read and edit.
However, when coworkers try to edit those files, they get an "Access Denied" error.
You need to configure new NTFS permissions for the user's C:\Users\ folder to ensure that the coworkers have access to write to that folder.
Which two choices should you use to achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. share permissions
B. the folder Properties window
C. the User Account Control Settings Control Panel window
D. the Group Policy management console
E. the Services management console
F. Local Users and Groups
G. the netsh command
H. Device Manager
I. the icacls command
Answer: B,I
Q11. - (Topic 3)
You have an offline virtual hard disk (VHD) that contains a generalized installation of Windows 7 Ultimate.
You need to disable the built-in games in the VHD. You must achieve this goal by using the minimum amount of administrative effort.
What should you do?
A. Start a computer from the VHD. Run Ocsetup.exe and specify the /uninstall parameter. Recapture the VHD.
B. Start a computer from the VHD. From Programs and Features, turn off the Games feature and then recapture the VHD.
C. Create an answer file that has InboxGames disabled. On a computer that runs Windows 7, attach the VHD. Run Pkgmgr.exe and specify the /uu parameter.
D. Create an answer file that has InboxGames disabled. On a computer that runs Windows 7, attach the VHD. Run Dism.exe and specify the /apply-unattend parameter.
Answer: D
Explanation:
Dism Deployment Image Servicing and Management (DISM) is a command-line tool used to service Windows. images offline before deployment. You can use it to install, uninstall, configure, and update Windows features, packages, drivers, and international settings. Subsets of the DISM servicing commands are also available for servicing a running operating system. /Apply-Unattend (Applies an unattend.xml file to an image.) If you are updating device drivers using an unattended answer file, you must apply the answer file to an offline image and specify the settings in the offlineServicing configuration pass. If you are updating packages or other settings using an unattended answer file, you can apply the answer file to an offline or online image. Specify the settings in the offlineServicing configuration pass.
Q12. - (Topic 2)
A user reports that he is unable to start his computer. He provides the following information:
. The boot partition is encrypted by using BitLocker Drive Encryption (BitLocker).
. The user cannot locate his BitLocker recovery key.
You need to start Windows 7 on the computer. The solution must use the minimum amount of administrative effort.
What should you do?
A. From the BIOS, disable the Trusted Platform Module (TPM).
B. Start the computer from the Windows 7 installation media and select Repair your computer.
C. Start the computer from the Windows 7 installation media, press SHIFT+F10, and then run CHKDSK.
D. Start the computer from the Windows 7 installation media and select Install now.
Answer: D
Explanation:
No recovery key = no recovery. Time to install.
Any other option defeats the whole point of encrypting it.
Encrypted volumes are locked when the encryption key is not available. When the operating system volume is locked, you can boot only to recovery mode. In recovery mode, you can enter the BitLocker password or you can attach the USB device that has the recovery key stored and restart the computer. Once you enter the recovery password or key, you can boot your computer normally.
The following events trigger recovery mode:
* The boot environment changes. This could include one of the boot files being modified.
* TPM is disabled or cleared.
* An attempt is made to boot without the TPM, PIN, or USB key being provided.
* You attach a BitLocker-encrypted operating system volume to another computer.
Q13. - (Topic 6)
You plan to install Windows 7 on a new notebook computer.
The computer will be used by users who speak English, French, and German.
You need to select an edition of Windows 7 that enables the users to switch between different graphical user interface (GUI) languages. The solution must minimize costs.
Which edition should you choose?
A. Window 7 Home Premium
B. Windows 7 Professional
C. Windows 7 Starter
D. Windows 7 Ultimate
Answer: D
Q14. - (Topic 3)
You administer 80 computers that run Windows 7. The computers have static IP addresses.
You need to change the static IP addresses on all the computers by using a startup script.
Which command should you include in the startup script?
A. Ipconfig.exe
B. Nbtstat.exe
C. Netstat.exe
D. Netsh.exe
Answer: D
Explanation:
Netsh.exe Netsh.exe is a tool an administrator can use to configure and monitor Windows-based computers at a command prompt. With the Netsh.exe tool, you can direct the context commands you enter to the appropriate helper, and the helper then carries out the command. A helper is a Dynamic Link Library (.dll) file that extends the functionality of the Netsh.exe tool by providing configuration, monitoring, and support for one or more services, utilities, or protocols. The helper may also be used to extend other helpers. You can use the Netsh.exe tool to perform the following tasks:
-Configure interfaces.
-Configure routing protocols.
-Configure filters.
-Configure routes.
-Configure remote access behavior for Windows-based remote access routers that are running the Routing and Remote Access Server (RRAS) Service.
-Display the configuration of a currently running router on any computer.
-Use the scripting feature to run a collection of commands in batch mode against a specified router.
The syntax for the Netsh.exe tool is: netsh [-r router name] [-a AliasFile] [-c Context] [Command | -f ScriptFile] To display a list of subcontexts and commands that can be used in a context, type the context name followed by a space and a ? at the netsh> command prompt. For example, to display a list of subcontext and commands that can be used in the /routing context, type routing ? at the netsh> command prompt, and then press ENTER.
Q15. - (Topic 4)
A company has a server running Windows Server2008 R2 with Windows Deployment Services (WDS), the Microsoft Deployment Toolkit (MDT), and the Windows Automated Installation Kit (WAIK) set up. The company also has client computers running Windows 7 Enterprise.
A new driver is released for the network cards that are installed in the client computers.
You need to update the image with the new driver for the network cards.
What should you do to add the driver to the mounted Windows image file?
A. Run the Start /w ocsetup command.
B. Run the DiskPart command and the Attach command option.
C. Use Sysprep with an answer file and set the PersistAHDeviceInstalls option in the answer file to True.
D. Use Sysprep with an answer file and set the PersistAHDeviceInstalls option in the answer file to False.
E. Use Sysprep with an answer file and set the UpdateInstalledDrivers option in the answer file to Yes.
F. Run the Dism command with the /Mount-Wim option.
G. Use Sysprep with an answer file and set the UpdateInstalledDrivers option in the answer file to No.
H. Run the PEImg /Prepcommand.
I. Run the ImageX command with the /Mountparameter.
J. Add a boot image and create a capture image in WDS.
K. Run the Dism command with the/Add-Driver option.
L. Run the BCDEdit /delete command.
M. Run the Dism command with the /Add-Package option.
Answer: K