Microsoft 70-646 Online Practice Questions and Exam Preparation

Microsoft 70-646 Online Questions & Answers

• Question 11:

  Your network contains an Active Directory forest named contoso.com.

  You plan to deploy a new child domain named branch.contoso.com. The child domain will contain two domain controllers. Both domain controllers will have the DNS Server server role installed. All users and computers in the branch office will

  be members of the branch.contoso.com domain.

  You need to plan the DNS infrastructure for the child domain to meet the following requirements:

  -

  Ensure resources in the root domain are accessible by fully qualified domain names.

  -

  Ensure resources in the child domain are accessible by fully qualified domain names.

  -

  Provide name resolution services in the event that a single server fails for a prolonged period of time.

  -

  Automatically recognize when new DNS servers are added to or removed from the contoso.com domain.

  What should you include in your plan?

  A. On both domain controllers, add a conditional forwarder for contoso.com and create a standard primary zone for branch.contoso.com.
  B. On both domain controllers, modify the root hints to include the domain controllers for contoso.com. On one domain controller, create an Active Directory-integrated zone for branch.contoso.com.
  C. On one domain controller create an Active Directory-integrated zone for branch.contoso.com and create an Active Directory-integrated stub zone for contoso.com.
  D. On one domain controller, create a standard primary zone for contoso.com. On the other domain controller, create a standard secondary zone for contoso.com.
  C. On one domain controller create an Active Directory-integrated zone for branch.contoso.com and create an Active Directory-integrated stub zone for contoso.com.

  ---

  http://technet.microsoft.com/en-us/library/cc772101.aspx

  http://technet.microsoft.com/en-us/library/cc771898.aspx

  Understanding DNS Zone Replication in Active Directory Domain Services

  Applies To: Windows Server 2008, Windows Server 2008 R2

  You can store Domain Name System (DNS) zones in the domain or application directory partitions of Active Directory Domain Services (AD DS). A partition is a data structure in AD DS that distinguishes data for different replication purposes.

  For more information, see Understanding Active Directory Domain Services Integration.

  The following table describes the available zone replication scopes for AD DS-integrated DNS zone data.

  

  When you decide which replication scope to choose, consider that the broader the replication scope, the greater the network traffic caused by replication. For example, if you decide to have AD DS-integrated DNS zone data replicated to all DNS servers in the forest, this will produce greater network traffic than replicating the DNS zone data to all DNS servers in a single AD DS domain in that forest.

  AD DS-integrated DNS zone data that is stored in an application directory partition is not replicated to the global catalog for the forest The domain controller that contains the global catalog can also host application directory partitions, but it will not replicate this data to its global catalog.

  AD DS-integrated DNS zone data that is stored in a domain partition is replicated to all domain controllers in its AD DS domain, and a portion of this data is stored in the global catalog. This setting is used to support Windows 2000. If an application directory partition's replication scope replicates across AD DS sites, replication will occur with the same intersite replication schedule as is used for domain partition data.

  By default, the Net Logon service registers domain controller locator (Locator) DNS resource records for the application directory partitions that are hosted on a domain controller in the same manner as it registers domain controller locator (Locator) DNS resource records for the domain partition that is hosted on a domain controller.

  Primary zone When a zone that this DNS server hosts is a primary zone, the DNS server is the primary source for information about this zone, and it stores the master copy of zone data in a local file or in AD DS. When the zone is stored in a file, by default the primary zone file is named rone_name.dns and it is located in the %windir%\System32\Dns folder on the server.

  Secondary zone When a zone that this DNS server hosts is a secondary zone, this DNS server is a secondary source for information about this zone. The zone at this server must be obtained from another remote DNS server computer that also hosts the zone. This DNS server must have network access to the remote DNS server that supplies this server with updated information about the zone. Because a secondary zone is merely a copy of a primary zone that is hosted on another server, it cannot be stored in AD DS.

  Stub zone When a zone that this DNS server hosts is a stub zone, this DNS server is a source only for information about the authoritative name servers for this zone. The zone at this server must be obtained from another DNS server that hosts the zone. This DNS server must have network access to the remote DNS server to copy the authoritative name server information about the zone.

  You can use stub zones to:

  

  Keep delegated zone information current. By updating a stub zone for one of its child zones regularly, the DNS server that hosts both the parent zone and the stub zone will maintain a current list of authoritative DNS servers for the child zone.

  

  Improve name resolution. Stub zones enable a DNS server to perform recursion using the stub zone's list of name servers, without having to query the Internet or an internal root server for the DNS namespace.

  

  Simplify DNS administration. By using stub zones throughout your DNS infrastructure, you can distribute a list of the authoritative DNS servers for a zone without using secondary zones. However, stub zones do not serve the same

  purpose as secondary zones, and they are not an alternative for enhancing redundancy and load sharing.

  There are two lists of DNS servers involved in the loading and maintenance of a stub zone:

  

  The list of master servers from which the DNS server loads and updates a stub zone. A master server may be a primary or secondary DNS server for the zone. In both cases, it will have a complete list of the DNS servers for the zone.

  

  The list of the authoritative DNS servers for a zone. This list is contained in the stub zone using name server (NS) resource records.

  When a DNS server loads a stub zone, such as widgets.tailspintoys.com, it quenes the master servers, which can be in different locations, for the necessary resource records of the authoritative servers for the zone widgets.tailspintoys.com. The list of master servers may contain a single server or multiple servers, and it can be changed anytime.

• Question 12:

  You need to recommend a solution for users in the branch office to access files in the main office.

  What should you include in the recommendation?

  A. a BranchCache server that operates in Distributed Cache mode
  B. a BranchCache server that operates in Hosted Cache mode
  C. a domainbased Distributed File System (DFS) namespace and DFS Replication
  D. a standalone Distributed File System (DFS) namespace and DFS Replication
  B. a BranchCache server that operates in Hosted Cache mode

  ---

  http://technet.microsoft.com/en-us/library/dd755969%28WS.10%29.aspx

  requirement = Minimize the amount of time it takes for users in the branch offices to access files on the file servers in the main office BranchCacheTM is a feature in Windows-7 and

  Windows Server?2008 R2 that can reduce wide area network (WAN) utilization and enhance network application responsiveness when users access content in a central office from branch office locations. When you enable BranchCache, a

  copy of the content that is retrieved from the Web server or file server is cached within the branch office. If another client in the branch requests the same content, the client can download it directly from the local branch network without

  needing to retrieve the content by using the Wide Area Network (WAN).

  This whitepaper provides an overview of BranchCache, explains the different modes in which BranchCache operates, and describes how BranchCache is configured. The paper also explains how BranchCache works with Web servers and

  file servers and the steps BranchCache takes to determine that the content is up-to-date.

  Hosted Cache mode

  The Hosted Cache is a central repository of data downloaded from BranchCache enabled servers into the branch office by BranchCache enabled clients. The configuration of Hosted Cache mode is described later in this document.

  Hosted Cache mode does not require a dedicated server. The BranchCache feature can be enabled on a server that is running Windows Server 2008 R2, which is located in a branch that is also running other workloads. In addition,

  BranchCache can be set up as a virtual workload and run on a server with other workloads, such as File and Print.

  Figure 2 illustrates Hosted Cache mode and provides a simplified illustration of the document caching and retrieval process.

  

• Question 13:

  You need to recommend a solution for deploying App1. The solution must support the company's planned changes. What should you include in the recommendation?

  A. Group Policy Software Installation
  B. Microsoft Application Virtualization (App-V)
  C. Microsoft Enterprise Desktop Virtualization (MED-V)
  D. Microsoft System Center Configuration Manager
  A. Group Policy Software Installation

  ---

  Requirements include minimize costs when possible Using a GPO to install software is freely available in AD

  Assigning Software You can assign a program distribution to users or computers. If you assign the program to a user, it is installed when the user logs on to the computer. When the user first runs the program, the installation is finalized. If you assign the program to a computer, it is installed when the computer starts, and it is available to all users who log on to the computer. When a user first runs the program, the installation is finalized.

  Publishing Software

  You can publish a program distribution to users. When the user logs on to the computer, the published program is displayed in the Add or Remove Programs dialog box, and it can be installed from there.

  Create a Distribution Point

  To publish or assign a computer program, you must create a distribution point on the publishing server:

  Log on to the server computer as an administrator.

  Create a shared network folder where you will put the Microsoft Windows Installer package (.msi file) that you want to distribute.

  Set permissions on the share to allow access to the distribution package.

  Copy or install the package to the distribution point. For example, to distribute Microsoft Office XP, run the administrative installation (setup.exe /a) to copy the files to the distribution point.

  Create a Group Policy Object

  To create a Group Policy object (GPO) to use to distribute the software package:

  Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.

  In the console tree, right-click your domain, and then click Properties.

  Click the Group Policy tab, and then click New.

  Type a name for this new policy (for example, Office XP distribution), and then press ENTER.

  Click Properties, and then click the Security tab.

  Click to clear the Apply Group Policy check box for the security groups that you want to prevent from having this policy applied.

  Click to select the Apply Group Policy check box for the groups that you want this policy to apply to.

  When you are finished, click OK.

  Assign a Package

  To assign a program to computers that are running Windows Server 2003, Windows 2000, or Microsoft Windows XP Professional, or to users who are logging on to one of these workstations:

  Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.

  In the console tree, right-click your domain, and then click Properties.

  Click the Group Policy tab, select the group policy object that you want, and then click Edit.

  Under Computer Configuration, expand Software Settings.

  Right-click Software installation, point to New, and then click Package.

  In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example, \\file server\share\file name.msi.

  Important Do not use the Browse button to access the location. Make sure that you use the UNC path to the shared installer package.

  Click Open.

  Click Assigned, and then click OK. The package is listed in the right pane of the Group Policy window.

  Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.

  When the client computer starts, the managed software package is automatically installed.

  Publish a Package

  To publish a package to computer users and make it available for installation from the Add or Remove Programs tool in Control Panel:

  Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.

  In the console tree, right-click your domain, and then click Properties.

  Click the Group Policy tab, click the group policy object that you want, and then click Edit.

  Under User Configuration, expand Software Settings.

  Right-click Software installation, point to New, and then click Package.

  In the Open dialog box, type the full UNC path of the shared installer package that you want. For example, \\file server\share\file name.msi.

  Important Do not use the Browse button to access the location. Make sure that you use the UNC path to the shared installer package.

  Click Open.

  Click Publish, and then click OK.

  The package is listed in the right pane of the Group Policy window.

  Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.

  Test the package:

  Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.

  Log on to a workstation that is running Windows 2000 Professional or Windows XP Professional by using an account that you published the package to.

  In Windows XP, click Start, and then click Control Panel.

  Double-click Add or Remove Programs, and then click Add New Programs.

  In the Add programs from your network list, click the program that you published, and then click Add. The program is installed.

  Click OK, and then click Close.

  Redeploy a Package

  In some cases you may want to redeploy a software package. For example, if you upgrade or modify the package. To redeploy a package:

  Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.

  In the console tree, right-click your domain, and then click Properties.

  Click the Group Policy tab, click the Group Policy object that you used to deploy the package, and then click Edit.

  Expand the Software Settings container that contains the software installation item that you used to deploy the package.

  Click the software installation container that contains the package.

  In the right pane of the Group Policy window, right-click the program, point to All Tasks, and then click

  Redeploy application. You will receive the following message:

  Redeploying this application will reinstall the application everywhere it is already installed. Do you want to continue?

  Click Yes.

  Quit the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.

  Remove a Package

  To remove a published or assigned package:

  Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.

  In the console tree, right-click your domain, and then click Properties.

  Click the Group Policy tab, click the Group Policy object that you used to deploy the package, and then click Edit.

  Expand the Software Settings container that contains the software installation item that you used to deploy the package.

  Click the software installation container that contains the package.

  In the right pane of the Group Policy window, right-click the program, point to All Tasks, and then click Remove.

  Do one of the following:

  Click Immediately uninstall the software from users and computers, and then click OK.

  Click Allow users to continue to use the software but prevent new installations, and then click OK.

  Quit the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in.

• Question 14:

  You are evaluating whether to add an iSCSI target in the main office to add storage to the file servers. Which technical requirement cannot be met when using an iSCSI target?

  A. Ensure that the data on the file servers is protected by using BitLocker.
  B. Ensure that the file servers can access additional storage as a local drive.
  C. Ensure that new storage solutions are supported by Windows Failover Clustering.
  D. Ensure that storage can be provisioned without causing any downtime of the file servers.
  A. Ensure that the data on the file servers is protected by using BitLocker.

  ---

  http://technet.microsoft.com/en-us/library/ee449438%28WS.10%29.aspx

  

• Question 15:

  A company has client computers that run Windows 7. Each client computer is deployed with Microsoft Office 2010 pre-installed.

  The company is adding three line-of-business-Applications that require access to Office functionality. None of the line-of-business Applications can co-exist with the others on the same client computer.

  You are designing a solution that must meet the following requirements:

  - Allow the use of all the line-of-business Applications on each client computer.

  -Maintain a central inventory of all Applications.

  -

  Centralize the process of deploying, streaming, updating and reporting on all Applications.

  You need to recommend a solution that meets the requirements.

  Which technologies should you recommend to achieve the indicated goals?

  To answer, select the appropriate technologies. Select all that apply.

  A. Group Policy deployment
  B. Microsoft Application Virtualization (App-V)
  C. Microsoft Enterprise Desktop Virtualization (MED-V)
  D. Microsoft System Center Configuration Manager 2007 R2
  E. Microsoft System Center Operations Manager 2007 R2
  F. Windows Server Update Services (WSUS)
  B. Microsoft Application Virtualization (App-V)
  D. Microsoft System Center Configuration Manager 2007 R2

  ---

  B: Microsoft Application Virtualization (App-V) also helps enterprises handle application compatibility issues, but it addresses challenges differently than MED-V does.

  Specifically, App-V lets you resolve conflicts that arise between different applications or different versions of the same application.

  D:

  *

  App-V integrates with System Center Configuration Manager, so you can manage virtual and physical applications, along with hardware and software inventory, operating system and patch deployment, and more.

  *

  Configuration Manager 2007 Software Update Management simplifies the complex task of delivering and managing updates to IT systems across the enterprise. IT administrators can

  quickly deliver updates of Microsoft products, third-party applications, custom in-house line-of-business applications, hardware drivers, and system BIOS to a variety of devices- ncluding desktops, laptops, servers, and mobile devices.

  *

  Configuration Manager 2007 allows you to perform tasks such as: Deploying operating systems Deploying software applications Deploying software updates Metering software usage Assessing variation from desired configurations Taking hardware and software inventory Remotely administering computers Incorrect:

  Not C: The key benefit of MED-V is that it helps enterprises deal with incompatibility between applications and the operating system.

  Not E: Operations Manager 2007 R2 helps reduce the cost of datacenter management with end-to-end monitoring and management of Microsoft, UNIX, and Linux servers and workloads, while assuring delivery of IT services to expected and

  agreed levels.

  Not F: Windows Server Update Services (WSUS) enables information technology administrators to deploy the latest Microsoft product updates to computers that are running the Windows operating system.

• Question 16:

  A company has servers that run Windows Server 2008 R2. Administrators use a graphic-intensive Application to remotely manage the network. You are designing a remote network administration solution.

  You need to ensure that authorized administrators can connect to internal servers over the Internet from computers that run Windows 7 or Windows Vista. Device redirection enforcement must be enabled for these connections.

  What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

  A. Deploy and configure a server with the Remote Desktop Web Access server role. Enable Forms-based authentication. Ensure that administrators use RDC 6.1 when accessing internal servers remotely.
  B. Deploy and configure a server with the Remote Desktop Web Access server role. Enable Forms-based authentication. Ensure that administrators use RDC 7.0 when accessing internal servers remotely,
  C. Deploy and configure a server with the Remote Desktop Gateway server role. Ensure that administrators use RDC 7.0 when accessing internal servers remotely.
  D. Deploy and configure a server with the Remote Desktop Gateway server role. Ensure that administrators use RDC 6.1 when accessing internal servers remotely.
  C. Deploy and configure a server with the Remote Desktop Gateway server role. Ensure that administrators use RDC 7.0 when accessing internal servers remotely.

  ---

  http://windows.microsoft.com/en-us/windows7/What-is-a-Remote-Desktop-Gateway-server A Remote Desktop Gateway (RD Gateway) server is a type of gateway that enables authorized users to connect to remote computers on a corporate network from any computer with an Internet connection. RD Gateway uses the Remote Desktop Protocol (RDP) along with the HTTPS protocol to help create a more secure, encrypted connection.

  http://technet.microsoft.com/en-us/library/dd560672%28v=ws.10%29.aspx

  Device redirection enforcement An RD Gateway server running Windows Server 2008 R2 includes the option to allow remote desktop clients to only connect to RD Session Host servers that enforce device redirection. RDC 7.0 is required for device redirection to be enforced by the RD Session Host server running Windows Server 2008 R2. Device redirection enforcement is configured on the Device Redirection tab of the RD CAP by using Remote Desktop Gateway Manager.

• Question 17:

  Your network consists of three Active Directory forests. Forest trust relationships exist between all forests. Each forest contains one domain. All domain controllers run Windows Server 2008 R2.

  Your company has three network administrators. Each network administrator manages a forest and the Group Policy objects (GPOs) within that forest.

  You need to create standard GPOs that the network administrators in each forest will use. The GPOs must meet the following requirements: - The GPOs must only contain settings for either user configurations or computer configurations.

  -The number of GPOs must be minimized.

  Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

  A. Export the new GPOs to .cab files. Ensure that the .cab files are available to the network administrator in each forest.
  B. Create two new GPOs. Configure both GPOs to use the required user configurations and the required computer configurations.
  C. Create two new GPOs. Configure one GPO to use the required user configuration. Configure the other GPO to use the required computer configuration.
  D. Back up the Sysvol folder that is located on the domain controller where the new GPOs were created. Provide the backup to the network administrator in each forest.
  A. Export the new GPOs to .cab files. Ensure that the .cab files are available to the network administrator in each forest.
  C. Create two new GPOs. Configure one GPO to use the required user configuration. Configure the other GPO to use the required computer configuration.

  ---

  http://technet.microsoft.com/en-us/library/ee390958.aspx http://www.petri.co.il/working_with_group_policy.htm

  Export a GPO to a File Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2 You can export a controlled Group Policy object (GPO) to a CAB file so that you can copy it to a domain in another forest and import the GPO into Advanced Group Policy Management (AGPM) in that domain. For information about how to import GPO settings into a new or existing GPO, see Import a GPO from a File. A user account with the Editor or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management (AGPM) is required to complete this procedure. Review the details in "Additional considerations" in this topic.

  To export a GPO to a file

  1.

  In the Group Policy Management Console tree, click Change Control in the forest and domain in which you want to manage GPOs.

  2.

  On the Contents tab, click the Controlled tab to display the controlled GPOs.

  3.

  Right-click the GPO, and then click Export to.

  4.

  Enter a file name for the file to which you want to export the GPO, and then click Export. If the file does not exist, it is created. If it already exists, it is replaced.

  Additional considerations

  -By default, you must be an Editor or an AGPM Administrator (Full Control) to perform this procedure. Specifically, you must have List Contents, Read Settings, and Export GPO permissions for the GPO.

  Group Policy sections

  Each GPO is built from 2 sections:

  -Computer configuration contains the settings that configure the computer prior to the user logon combo-box.

  -User configuration contains the settings that configure the user after the logon. You cannot choose to apply the setting on a single user, all users, including administrator, are affected by the settings.

  

• Question 18:

  You need to recommend an administrative solution for the local support technicians in the satellite offices. The solution must meet the company's security requirements. What should you include in the recommendation?

  A. Active Directory delegation
  B. Administrator Role Separation
  C. managed service accounts
  D. Restricted Groups
  B. Administrator Role Separation

  ---

  http://technet.microsoft.com/en-us/library/cc753170%28WS.10%29.aspx

  This topic explains how you can use Administrator Role Separation (ARS) on a read-only domain controller (RODC) to delegate RODC administration to a user who is not a member of the Domain Admins group.

  One problem encountered by administrators of domain controllers in perimeter networks is that domain controllers typically have to be set up and administered by domain administrators.

  Administrative operations, such as applying software updates, performing an offline defragmentation, or backing up the system, cannot be delegated.

  With the introduction of RODCs, domain administrators can delegate both the installation and the administration of RODCs to any domain user, without granting them any additional rights in the domain. The ability to perform this delegation is

  called ARS.

• Question 19:

  You need to recommend changes to Web1 to ensure that server backups can be performed remotely from Backup1.

  Which two changes should you include in the recommendation? (Each correct answer presents part of the solution. Choose two.)

  A. Install Windows PowerShell.
  B. Install Windows Server Backup.
  C. Modify the Windows Firewall settings.
  D. Enable the IIS Management Service feature.
  B. Install Windows Server Backup.
  C. Modify the Windows Firewall settings.

• Question 20:

  A company has a single Active Directory Domain Services (AD DS) domain. Each department within the company has its own organizational unit (OU). All client computers run Windows 7 Enterprise Edition and Microsoft Office 2010.

  The company wants to restrict access to some Office 2010 features. They develop a standard list of corporate restrictions.

  You have the following requirements:

  -

  Apply the corporate restrictions to all existing and future departments.

  -

  Ensure that specific restrictions can be added or removed for individual departments.

  -

  Ensure that the corporate restrictions are not App1ied to users and computers in the built-in Active Directory containers.

  -

  Minimize administrative effort for Applying restrictions to future departments.

  You need to recommend a Group Policy object (GPO) deployment that meets the requirements.

  What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

  A. Create a GPO that contains the corporate restrictions and link it to the domain. Install the Office 2010 Group Policy Administrative Template settings. Create a separate GPO for each department that deploys and configures Office 2010.
  B. Install the Office 2010 Group Policy Administrative Template settings. Create a Starter GPO that contains the corporate restrictions. Create a separate GPO based on the Starter GPO for each department that deploys and configures Office 2010.
  C. Install the Office 2010 Resource Kit and create a custom transform (.mst) file for each department. Create a Starter GPO that contains the corporate restrictions. Create a separate GPO based on the Starter GPO for each department that deploys Office 2010 by using the transform file.
  D. Install the Office 2010 Resource Kit and create custom installer files for each department. Create a GPO that contains the corporate restrictions and link it to the domain. Create a separate GPO for each department that deploys the installer files,
  B. Install the Office 2010 Group Policy Administrative Template settings. Create a Starter GPO that contains the corporate restrictions. Create a separate GPO based on the Starter GPO for each department that deploys and configures Office 2010.

  ---

  Starter GPOs are used as a base template to build other GPOs from. admin templates (ADMX and ADML files) need to be applied so that the settings specific to Office 2010 can be applied