Q1. - (Topic 6)
You are a network administrator for a global company that has Windows Server 2008 R2 servers and Windows 7 Enterprise computers.
Management wants to decrease VPN costs by implementing DirectAccess for remote network access.
They assign you to evaluate the current network infrastructure, which includes the following elements:
Active Directory
IPv6 network and applications
Server for DirectAccess service
You need to ensure that all critical infrastructure components are present.
What should you add to the infrastructure?
A. Windows Internet Name Service (WINS) server
B. Public key infrastructure
C. NAT-PT devices
D. Windows Server 2012
Answer: B
Explanation: DirectAccess With Windows Server 2008 R2 requires:
* Public key infrastructure (PKI) to issue computer certificates.
* One or more DirectAccess servers running Windows Server 2008 R2 with two network adapters: one that is connected directly to the Internet, and a second that is connected to the intranet.
* On the DirectAccess server, at least two consecutive, public IPv4 addresses assigned to the network adapter that is connected to the Internet.
* DirectAccess clients running Windows 7 or Windows 8 "Enterprise" edition clients
* At least one domain controller and Domain Name System (DNS) server running Windows Server 2008 SP2 or Windows Server 2008 R2.
Note: DirectAccess, also known as Unified Remote Access, is a VPN-like technology that provides intranet connectivity to client computers when they are connected to the Internet. Unlike many traditional VPN connections, which must be initiated and terminated by explicit user action, DirectAccess connections are designed to connect automatically as soon as the computer connects to the Internet. DirectAccess was introduced in Windows Server 2008 R2, providing this service to Windows 7 and Windows 8 "Enterprise" edition clients.
Q2. - (Topic 5)
You use a client computer named Marketing that has Windows 7 SP1 installed. The computer allows connections from other computers that have any version of Remote Desktop installed. The computer has a locally attached printer shared as Printer1.
A MarketingUsers group is a member of the local Remote Desktop Users group on the computer. Only the MarketingUsers group has access to Printer1. A user named User1 is a member of MarketingUsers.
You need to configure the computer to meet the following requirements:
. Prevent User1 from establishing Remote Desktop sessions to the Marketing computer.
. Allow other members of MarketingUsers to connect to the Marketing computer by using Remote Desktop.
. Ensure that User1 can access Printer1.
What should you do?
A. Assign the Deny access to this computer from the network user right to User1.
B. Remove the MarketingUsers group from the Remote Desktop Users group.
C. Assign the Deny log on through Remote Desktop Services user right to User1.
D. Remove User1 from the MarketingUsers group.
Answer: C
Q3. - (Topic 3)
You have a computer that contains a DVD drive and a single 350-GB hard disk drive. You attempt to install Windows 7 on the computer by using the DVD installation media and receive the following error message: "Reboot and Select proper Boot device or Insert Boot Media in selected Boot device."
You need to ensure that you can install Windows 7 on the computer by using the DVD installation media.
What should you do?
A. From the BIOS, modify the startup order.
B. From the BIOS, enable Pre-Boot Execution Environment (PXE).
C. Create an answer file named oobe.xml and place the file on the hard disk drive.
D. Create an answer file named autounattend.xml and place the file on the hard disk drive.
Answer: A
Explanation: To install Windows 7 from a DVD-ROM, boot from the DVD-ROM drive and follow the prompts. You may need to configure the computer's BIOS to support booting from DVD-ROM. If a computer does not have a DVD-ROM drive attached, you can still install from DVD-ROM—you just need to acquire a USB DVD-ROM drive. In this case, it will be necessary to configure the computer's BIOS to boot from the USB device.
Q4. - (Topic 5)
You use a portable computer that has Windows 7 SP1 Ultimate installed.
You update the driver for the computer's video card and the computer becomes unresponsive.
You need to be able to roll back the video card driver.
What should you do?
A. Restart the computer in safe mode.
B. Start the computer, press F8, and then select Repair Your Computer.
C. Boot the computer from a Windows Recovery Environment (Windows RE) disk, and then restore the system image.
D. Start the computer, press F8, and then select Debugging Mode.
Answer: A
Q5. - (Topic 1)
You have a computer that runs Windows 7.
Your network contains a VPN server that runs Windows Server 2008.
You need to authenticate to the VPN server by using a smart card.
Which authentication setting should you choose?
A. CHAP
B. EAP
C. MS-CHAP v2
D. PAP
Answer: B
Explanation:
VPN Server Software Requirements VPN server software requirements for smart card access are relatively straightforward. The remote access servers must run Windows 2000 Server or later, have Routing and Remote Access enabled, and must support Extensible Authentication Protocol-Transport Layer Security (EAP-TLS). EAP-TLS is a mutual authentication mechanism developed for use in conjunction with security devices, such as smart cards and hardware tokens. EAP-TLS supports Point-to-Point Protocol (PPP) and VPN connections, and enables exchange of shared secret keys for MPPE, in addition to Ipsec. The main benefits of EAP-TLS are its resistance to brute-force attacks and its support for mutual authentication. With mutual authentication, both client and server must prove their identities to each other. If either client or server does not send a certificate to validate its identity, the connection terminates.Microsoft Windows Server. 2003 supports EAP-TLS for dial-up and VPN connections, which enables the use of smart cards for remote users. For more information about EAP-TLS, see the Extensible Authentication Protocol (EAP) topic at www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/auth_eap. mspx. For more information about EAP certificate requirements, see the Microsoft Knowledge Base article "Certificate Requirements when you use EAP-TLS or PEAP with EAP-TLS" at http://support.microsoft.com/default.aspx? scid=814394.
Q6. - (Topic 3)
You perform a clean installation of Windows 7 on a computer.
You need to ensure that you can run Windows XP Mode in Windows 7.
What should you do?
A. Enable hardware-assisted virtualization.
B. Create a Data Execution Prevention (DEP) exception.
C. Install Windows XP in the same partition as Windows 7.
D. Install Windows XP in a different partition than Windows 7.
Answer: A
Explanation:
Windows XP Mode requires a processor that supports hardware virtualization using either the AMD-V or Intel VT options. Most processors have this option disabled by default; to enable it, you must do so from the computer's BIOS. After the setting has been configured, it is necessary to turn the computer off completely. The setting is not enabled if you perform a warm reboot after configuring BIOS. As 256 MB of RAM must be mallocated to the Windows XP Mode client, the computer running Windows 7 on which you deploy Windows XP Mode requires a minimum of 2 GB of RAM, which is more than the 1 GB of RAM Windows 7 hardware requirement.
Q7. - (Topic 1)
Which of the following tools can you use to determine if the applications installed on your computer running Windows Vista are known to have problems with Windows 7?
A. Windows 7 Upgrade Advisor
B. Sysprep
C. USMT
D. Windows PE
Answer: A
Explanation:
Windows 7 Upgrade Advisor Prior to attempting to perform the upgrade from Windows Vista to Windows 7, you should run the Windows 7 Upgrade Advisor. The Windows 7 Upgrade Advisor is an application that you can download from Microsoft's Web site that will inform you if Windows 7 supports a computer running the current hardware and software configuration of Windows Vista.
Prior to running the Windows 7 Upgrade Advisor, you should ensure that all hardware that you want to use with Windows 7, such as printers, scanners, and cameras, are connected to the computer. The Upgrade Advisor generates a report that informs you of which applications and devices are known to have problems with Windows 7.
Q8. HOTSPOT - (Topic 6)
You are a system administrator for a regional accounting firm. The existing computers have either Windows Vista Enterprise or Windows Vista Home Premium installed.
Your manager wants you to upgrade all computers to Windows 7.
You need to determine which editions of Windows 7 support an in-place upgrade from the two editions of Windows Vista.
In the table below, identify which editions of Windows 7 will support an in-place upgrade from Windows Vista Enterprise and Home Premium. (Make only one selection in each column. This question is worth two points. )
Answer:
Q9. - (Topic 1)
You have a portable computer named Computer1 that runs Windows 7.
You have a file server named Server1 that runs Windows Server 2008. Server1 contains a shared folder named Share1.
You need to configure Computer1 to meet the following requirements:
. Ensure that cached files from Share1 are encrypted.
. Ensure that files located in Share1 are available when Server1 is disconnected from the network.
What should you do?
A. On Server1, encrypt the files in Share1. On Computer1, make Share1 available offline.
B. On Server1, configure BitLocker Drive Encryption. On Computer1, make Share1 available offline.
C. On Computer1, make Share1 available offline and enable encryption of offline files.
D. On Computer1, copy the files from Share1 to the Documents library and configure BitLocker Drive Encryption.
Answer: C
Explanation:
Offline FilesThe Offline Files feature of Windows 7 allows a client to locally cache files
hosted in shared folders so that they are accessible when the computer is unable to connect directly to the network resource. The Offline Files feature is available to users of the Professional, Enterprise, and Ultimate editions of Windows 7. You can use the Offline Files feature to ensure access when a client computer is out of the office or when a temporary disruption, such as a wide area network (WAN) link failing between a branch office and a head office, blocks access to specially configured shared folders.
Using Sync CenterYou can use Sync Center to synchronize files, manage offline files, and resolve synchronization conflicts manually. Sync Center is located within the Control Panel or by typing Sync Center into the Search Programs and Files text box on the Start menu. Clicking Manage Offline Files opens the Offline Files. This dialog box is also available using the Offline Files control panel. Using this dialog box, you can disable offline files, view offline files, configure disk usage for offline files, configure encryption for offline files, and configure how often Windows 7 should check for slow network conditions.
Q10. - (Topic 4)
A company has a server running Windows Server 2008 R2, with Windows Deployment Services (WDS), the Microsoft Deployment Toolkit (MDT), and the Windows Automated Installation Kit (WAIK) set up. The company also has client computers running Windows 7 Enterprise.
You are preparing to capture an image of a Windows 7 client computer.
You need to ensure that the captured image is generic and does not contain the device drivers from the client computer.
What should you do?
A. use Sysprep with an answer file and set the PersistAllDeviceInstalls option in the answer file to True.
B. Run the Start /w ocsetup command.
C. Run the PEImg /Prep command.
D. Run the Dism command with the /Mount-Wimoption.
E. Use Sysprep with an answer file and set the UpdateInstalledDrivers option in the answer file to No.
F. Run the Dism command with the /Add-Driver option.
G. Use Sysprep with an answer file and set the UpdateInstalledDrivers option in the answer file to Yes.
H. Run the BCDEdit/delete command.
I. Run the ImageX command with the /Mount parameter.
J. Run the Dism command with the /Add-Package option.
K. Add a boot image and create a capture image in WDS.
L. Use Sysprep with an answer file and set the PersistAllDeviceInstalls option in the answer file to False.
M. Run the DiskPart command and the Attach command option.
Answer: L
Explanation:
Persisting Plug and Play Device Drivers During generalize You can persist device drivers when you run the Sysprep command with the /generalize option by specifying the PersistAllDeviceInstalls setting in the Microsoft-Windows-PnPSysprep component. During the specialize configuration pass, Plug and Play scans the computer for devices and installs device drivers for the detected devices. By default, these device drivers are removed from the system when you generalize the system. If you set PersistAllDeviceInstalls to true in an answer file, Sysprep will not remove the detected device drivers. For more information, see the Unattended WindowsSetup Reference (Unattend.chm). http://technet.microsoft.com/en-us/library/dd744512(WS.10).aspx
Q11. - (Topic 5)
You manage several client computers in an organization.
You need to ensure that all users, including administrators, are required to enter a username and password when uninstalling applications from any computer in the organization.
What should you do?
A. Create a custom GPO to modify the User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode setting.
B. Configure an AppLocker Windows Installer rule.
C. Configure the User Account Control (UAC) settings on all client computers to always notify.
D. Create a custom GPO to configure a software restriction policy.
Answer: A
Q12. - (Topic 4)
You plan to deploy Windows 7 images.
You need to ensure that you can deploy images using the WindowsPreinstallation Environment (Windows PE).
What would you add to the Window PE Image?
A. ImageX
B. Usmtutils.exe
C. Mighost.exe
D. Loadstate.exe
Answer: A
Q13. - (Topic 6)
You are a network administrator for a law firm that has Windows 7 computers as part of a domain. Users are not administrators of their own computers.
A lawyer is working on a critical case and wants to use a Windows 7 laptop to access a computer in the office. The lawyer connects to the corporate VPN and receives a message that states that the lawyer does not have permission to use Remote Desktop to connect to the computer.
You need to allow the lawyer to access the computer in the office.
What should you do?
A. Upgrade the Remote Desktop Client application on the users laptop.
B. Add the user to the Remote Desktop Users group of the target computer.
C. Select Allow connections from computers running any version of Remote Desktop on the Remote tab of the computer.
D. Allow Remote Desktop through Windows Firewall.
Answer: B
Q14. - (Topic 4)
You have a portable computer that runs Windows 7. Windows Backup is configured to run every day at 15:00.
You need to prevent backups from automatically running when the computer is running on the battery.
What should you do?
A. From Backup and Restore, click Change settings.
B. From Task Scheduler, modify the Automatic Backup task.
C. From Power Options, modify the settings of the current power plan.
D. From the local computer policy, modify the power management settings.
Answer: B
Explanation: To set power management options for a scheduled task
-Open Task Scheduler.
-Right-click the task for which you want to set power management options, and then click Properties.
-On the Settings tab, under Power Management, do one or more of the following:
-To conserve the battery power of your computer, select the Don't start the task if the computer is running on batteries check box.
-To stop the task if the computer starts running on battery power, select the Stop the task if battery mode begins check box.
-To wake your computer from hibernation or standby to run a task, select the Wake the computer to run this task check box.
Task Scheduler
With Scheduled Tasks, you can schedule any script, program, or document to run at a time that is most convenient for you. Scheduled Tasks starts every time that you start Windows and runs in the background, and it starts each task that you schedule at the time that you specify when you create the task.
Q15. - (Topic 5)
You install the Windows Automated Installation Kit (WAIK) for Windows 7 on a computer that runs Windows 7.
You want to deploy a Windows image (WIM) file to other computers in the domain. You need to capture the operating system, computer configuration, and applications installed on the computer to a WIM file.
What should you do before you capture the image?
A. Run Diskpart.exe.
B. Run Oscdimg.exe.
C. Run ScanState.exe.
D. Run Sysprep.exe.
Answer: B
Explanation: Oscdimg is a command-line tool that you can use to create an image (.iso) file of a customized 32-bit or 64-bit version of Windows Preinstallation Environment (Windows PE). You can then burn the .iso file to a CD or DVD. Oscdimg supports ISO 9660, Joliet, and Universal Disk Format (UDF) file systems. Note: … You just created your Windows PE Boot Flash Drive. Now you need to capture a generalized image for deployment. If you would like to burn WindowsPE to a CD instead of a USB thumb drive. The following command will copy all of the files necessary to create a WindowsPE boot disc into an ISO image file. Then you can burn the image file to a CD to create a bootable WindowsPE CD. In the command below the ISO image file that you will want to burn is winpex86.iso Oscdimg -n -bC:\winpe_x86\Etfsboot.com C:\winpe_x86\ISO C:\winpe_x86\winpex86.iso Now burn the ISO image file winpex86.iso to a CD as a bootable image disc and you are finished!