Microsoft 70-646 Online Practice Questions and Exam Preparation

Microsoft 70-646 Online Questions & Answers

• Question 31:

  Your network consists of a single Active Directory domain. The domain contains a server that runs Windows Server 2008 R2 and that has the Remote Desktop Services server role installed.

  The server has six custom Applications installed. The custom Applications are configured as RemoteApps.

  You notice that when a user runs one of the Applications, other users report that the server seems slow and that some Applications become unresponsive.

  You need to ensure that active user sessions receive equal access to system resources.

  What should you do?

  A. Implement Remote Desktop Web Access.
  B. Implement Remote Desktop Connection Broker.
  C. Configure Performance Monitor.
  D. Implement Windows System Resource Manager.
  D. Implement Windows System Resource Manager.

  ---

  http://technet.microsoft.com/en-us/library/cc771218%28WS.10%29.aspx http://technet.microsoft.com/en-us/library/cc732553%28WS.10%29.aspx Terminal Services and Windows System Resource Manager

  Windows-System Resource Manager (WSRM) on Windows Server-2008 allows you to control how CPU and memory resources are allocated to applications, services, and processes on the computer. Managing resources in this way improves system performance and reduces the chance that applications, services, or processes will take CPU or memory resources away from one another and slow down the performance of the computer. Managing resources also creates a more consistent and predictable experience for users of applications and services running on the computer.

  You can use WSRM to manage multiple applications on a single computer or users on a computer on which Terminal Services is installed.

  Resource-Allocation Policies WSRM uses resource-allocation policies to determine how computer resources, such as CPU and memory, are allocated to processes running on the computer. There are two resource-allocation policies that are specifically designed for computers running Terminal Services. The two Terminal Services-specific resource-allocation policies are:

  Equal_Per_User Equal_Per_Session

  

• Question 32:

  You need to recommend changes to Web1 to ensure that server backups can be performed remotely from Backup1.

  Which two changes should you include in the recommendation? (Each correct answer presents part of the solution. Choose two.)

  A. Install Windows PowerShell.
  B. Install Windows Server Backup.
  C. Modify the Windows Firewall settings.
  D. Enable the IIS Management Service feature.
  B. Install Windows Server Backup.
  C. Modify the Windows Firewall settings.

• Question 33:

  A company has client computers that run Windows 7 and Windows Vista. The company has a single domain Active Directory Domain Services (AD DS) forest with domain controllers that run Windows Server 2008 R2.

  An Application must be installed on the windows 7 client computers when users log on to the computers.

  You need to design an Application deployment solution.

  Which actions should you perform in sequence?

  To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. (Use only actions that Apply.)

  Select and Place:

  

  

  ---

  http://support.microsoft.com/kb/816102

  Assigning Software

  You can assign a program distribution to users or computers. If you assign the program to a user, it is installed when the user logs on to the computer. When the user first runs the program, the installation is finalized. If you assign the program

  to a computer, it is installed when the computer starts, and it is available to all users who log on to the computer. When a user first runs the program, the installation is finalized.

  Publishing Software

  You can publish a program distribution to users. When the user logs on to the computer, the published program is displayed in the Add or Remove Programs dialog box, and it can be installed from there.

• Question 34:

  You are designing a Windows Server 2008 R2 deployment strategy for the Minneapolis campus servers.

  Which deployment strategy should you recommend?

  A. install from media.
  B. Use a discover image in WDS.
  C. Deploy a VHD image.
  D. Deploy a WIM image.
  D. Deploy a WIM image.

  ---

  Requirements - Bitlocker is needed on all disks in Minneapolis and installations must be done remotely

  VHD Image

  - according to the official MS courseware book 6433A - a VHD can not contain more than one partition. so if true that rules VHD Images out because you need bitlocker and bitlocker requires 2 partitions. so if this is true then answer C is wrong.also http://technet.microsoft.com/en-us/library/dd363560.aspx

  A supported .vhd image. The only supported operating systems are Windows Server 2008 R2, Windows 7 Enterprise, and Windows 7 Ultimate. Fixed, dynamic, and differencing .vhd images are supported. However, note that a supported

  image cannot contain the following:

  More than one operating system.

  More than one partition.

  Applications or data (instead of an operating system).

  A 64-bit operating system that is partitioned with a GUID partition table (GPT).

  So again further evidence that C is not the right answer as Bit locker needs 2 partitions.

  I'm leaning toward Answer B because

  WDS Images

  WDS uses two different types of images: install images and boot images. Install images are the operating system images that will be deployed to computers running Windows Server 2008 R2, Windows Server 2008, Windows 7, or Windows

  Vista. A default installation image named Install.wim is located in the \Sources directory of the installation DVD. If you are using WDS to deploy Windows 7 to computers with different processor architectures, it will be necessary to add

  separate installation images for each architecture to the WDS server.

  Architecture-specific images can be found on the architecture-specific installation media; for example, the Itanium image is located on the Itanium installation media, and the x64 default installation image is located on the x64 installation

  media. Although it is possible to create custom images, it is necessary to have only one image per processor architecture. For example, deploying Windows Server 2008 R2 Enterprise edition x64 to a computer with two x64 processors and to

  a computer with eight x64 processors in SMP configuration only requires access to the default x64 installation image. Boot images are used to start a client computer prior to the installation of the operating system image. When a computer

  starts off a boot image over the network, a menu is presented that displays the possible images that can be deployed to the computer from the WDS server. The Windows Server 2008 R2 Boot.wim file allows for advanced deployment options,

  and this file should be used instead of the Boot.wim file that is available from other sources.

  In addition to the basic boot image, there are two separate types of additional boot images that can be configured for use with WDS. The capture image is a boot image that starts the WDS capture utility. This utility is used with a reference

  computer, prepared with the Sysprep utility, as a method of capturing the reference computer's image for deployment with WDS. The second type of additional boot image is the discover image. Discover images are used to deploy images to

  computers that are not PXE-enabled or on networks that don't allow PXE. These images are written to CD, DVD, or USB media and the computer is started off the media rather than off the PXE network card, which is the traditional method of

  using WDS.

  I'm gonna make a huge assumption that the Minneapolis servers are on a different subnet, which makes sense because they are all different campuses for a college. but if there is a DHCP Server or IP Helper is enabled then that wont be a

  problem. So B may not be the answer

  Media Install

  It specifically says they use WDS for deployment. WDS is all about using images so would that not rule out media install? You can do media installs that are unattended but it requires sending a DVD and corresponding USB key with an

  answer file to the site and it being inserted into the server. But GDI uses PXE enabled network cards so that would imply media is not used as images would be stored centrally.

• Question 35:

  Your network consists of a single Active Directory domain. Your main office has an Internet connection.

  Your company plans to open a branch office. The branch office will connect to the main office by using a WAN link. The WAN link will have limited bandwidth. The branch office will not have access to the Internet. The branch office will contain 30 Windows Server 2008 R2 servers.

  You need to plan the deployment of the servers in the branch office.

  The deployment must meet the following requirements:

  -Installations must be automated.

  -Computers must be automatically activated.

  -Network traffic between the offices must be minimized.

  What should you include in your plan?

  A. In the branch office, implement Key Management Service (KMS), a DHCP server, and Windows Deployment Services (WDS).
  B. Use Multiple Activation Key (MAK) Independent Activation on the servers. In the main office, implement a DHCP server and Windows Deployment Services (WDS).
  C. In the main office, implement Windows Deployment Services (WDS). In the branch office, implement a DHCP server and implement the Key Management Service (KMS).
  D. Use Multiple Activation Key (MAK) Independent Activation on the servers. In the main office, implement a DHCP server. In the branch office, implement Windows Deployment Services (WDS).
  A. In the branch office, implement Key Management Service (KMS), a DHCP server, and Windows Deployment Services (WDS).

  ---

  The key here is that bandwidth from the branch to the main office is limited and there is no direct link to MS.

  WDS and Product Activation

  Although product activation does not need to occur during the actual installation process, administrators considering using WDS to automate deployment should also consider using volume activation to automate activation. Volume activation

  provides a simple centralized method that systems administrators can use for the activation of large numbers of deployed servers. Volume activation allows for two types of keys and three methods of activation. The key types are the Multiple

  Activation Key (MAK) and the Key Management Services (KMS) key.

  Multiple Activation Keys allow activation of a specific number of computers. Each successful activation depletes the activation pool. For example, a MAK key that has 100 activations allows for the activation of 100 computers. The Multiple

  Activation Key can use the MAK Proxy Activation and the MAK Independent Activation activation methods. MAK Proxy Activation uses a centralized activation request on behalf of multiple products using a single connection to Microsoft's

  activation servers. MAK Independent Activation requires that each computer activates individually against Microsoft's activation servers.

  The Branch office has no internet connection, so MAK is not the solution.

  KMS requires at least 25 computers connecting before activation can occur, and activation must be renewed by reconnecting to the KMS server every 180 days.

  You can use KMS and MAK in conjunction with one another. The number of computers, how often they connect to the network, and whether there is Internet connectivity determines which solution you should deploy. You should deploy MAK

  if substantial numbers of computers do not connect to the network for more than 180 days. If there is no Internet connectivity and more than 25 computers, you should deploy KMS. If there is no Internet connectivity and less than 25

  computers, you will need to use MAK and activate each system over the telephone.

• Question 36:

  You need to recommend an availability solution for Site1 that meets the company's Application requirements and business goals. What should you include in the recommendation?

  A. hardware load balancing
  B. Network Load Balancing (NLB)
  C. round robin DNS
  D. Windows Failover Clustering
  B. Network Load Balancing (NLB)

  ---

  http://technet.microsoft.com/en-us/library/cc725691.aspx

  The Network Load Balancing (NLB) feature in Windows Server 2008 R2 enhances the availability and scalability of Internet server applications such as those used on Web, FTP, firewall, proxy, virtual private network (VPN), and other mission-critical servers. A single computer running Windows Server 2008 R2 provides a limited level of server reliability and scalable performance.

  However, by combining the resources of two or more computers running one of the products in Windows Server 2008 R2 into a single virtual cluster, NLB can deliver the reliability and performance that Web servers and other mission-critical servers need.

• Question 37:

  You need to recommend changes to the intranet site that meet the company's technical requirements. What should you include in the recommendation?

  A. additional Application pools
  B. additional worker processes
  C. Failover Clustering
  D. Network Load Balancing (NLB)
  D. Network Load Balancing (NLB)

  ---

  http://technet.microsoft.com/en-us/library/cc725691.aspx

  The Network Load Balancing (NLB) feature in Windows Server 2008 R2 enhances the availability and scalability of Internet server applications such as those used on Web, FTP, firewall, proxy, virtual private network (VPN), and other mission-critical servers. A single computer running Windows Server 2008 R2 provides a limited level of server reliability and scalable performance.

  However, by combining the resources of two or more computers running one of the products in Windows Server 2008 R2 into a single virtual cluster, NLB can deliver the reliability and performance that Web servers and other mission-critical servers need.

• Question 38:

  You are planning for the IT integration of Tailspin Toys and Wingtip Toys. The company has decided on the following name resolution requirements:

  -

  Name resolution for Internet-based resources must continue to operate by using the same DNS servers as prior to the merger.

  -

  The existing connectivity between Tailspin Toys and Wingtip Toys must be used for all network communication.

  -The documented name resolution goals must be met.

  You need to provide a name resolution solution that meets the requirements.

  What should you recommend? (Choose all that Apply.)

  A. On TT-DC01, TT-DC02, TT-DC03, and TT-DC04, add forwarders with the IP addresses of 172.16.10.10 and 172.16.10.11.
  B. On TT-DC01, add a conditional forwarder for wingtiptoys.com, use 172.16.10.10 and 172.16.10.11 as the IP addresses, and then configure it to replicate to all DNS servers in the tailspintoys.com domain.
  C. On TT-DC01, TT-DC02, TT-DC03, and TT-DC04, add a secondary DNS zone for wingtiptoys.com and specify 172.16.10.10 and 172.16.10.11 as the master DNS servers.
  D. On WT-DC01 and WT-DC02, add a secondary DNS zone for tailspintoys.com and specify 10.10.10.10 and 10.10.10.11 as the master DNS servers.
  E. On WT-DC01, WT-DC02, WT-DC03, and WT-DC04, add forwarders with the IP addresses of 10.10.10.10 and 10.10.10.11.
  F. On WT-DC01, add a conditional forwarder for tailspintoys.com, use 10.10.10.10 and 10.10.10.11 as the IP addresses, and configure it to replicate to all DNS servers in the wingtiptoys.com domain.
  B. On TT-DC01, add a conditional forwarder for wingtiptoys.com, use 172.16.10.10 and 172.16.10.11 as the IP addresses, and then configure it to replicate to all DNS servers in the tailspintoys.com domain.
  F. On WT-DC01, add a conditional forwarder for tailspintoys.com, use 10.10.10.10 and 10.10.10.11 as the IP addresses, and configure it to replicate to all DNS servers in the wingtiptoys.com domain.

  ---

  Conditional forwarding is used to control where a DNS server forwards queries for a specific domain. A DNS server on one network can be configured to forward queries to a DNS server on another network without having to query DNS

  servers on the Internet. They can also be used to help companies resolve each other's namespace in a situation where companies collaborate a merger is underway.

  Forwarders and Forwarding

  When a name server is queried in DNS, the way it responds depends on the type of query issued, which can be either iterative or recursive. In an iterative query, the client asks the name server for the best possible answer to its query. The

  name server checks its cache and the zones for which it is authoritative and returns the best possible answer to the client, which could be either a full answer like "here is the IP address of the host you are looking for" or a partial answer like

  "try this other name server instead, it might know the answer."

  In a recursive query, things work a little different for here the client demands either a full answer (the IP address of the target host) or an error message like "sorry, name not found." In Windows DNS, client machines always send recursive

  queries to name servers, and name servers usually send iterative queries to other name servers.

  What Conditional Forwarding Does

  A conditional forwarder is one that handles name resolution only for a specific domain. For example, you could configure your name server to forward any requests for hosts in the domain google.com directly to a specific name server that is

  authoritative for the google.com domain.

  What this does is speed up the name resolution process by eliminating the need to go up to root to find this authoritative server.

  So in our question above we would create a conditional forwarder in Wingtiptoys.com for tailspintoys.com and then create a conditional forwarder in tailspintoys.com for windtiptoys.com.

  additionally in Server 2008 there is a separate node in DNS Manager to configure Conditional Forwarders, previously if you wanted to configure Forwarding for a certain DNS domain, and you wanted to do this on all DNS Servers, you had to

  do this for all the DNS servers separately.

  Forwarders can be configured centrally and can be configured as `Active Directory' integrated What does this mean: well this means they are stored in Active Directory and you can configure a replication scope, in the same way you can with

  AD Integrated DNS Zones, they can be replicated using following scopes:

  -

  All DNS servers in this forest (through the ForestDNSZones Application Partition)

  -

  All DNS servers in this domain (through the DomainDNSZones Application Partition)

  -All Domain Controllers in this domain (for Windows 2000 compatibility), stored in the Domain Partition

  -

  In a custom Application Partition of your liking, if you want to replicate only to certain Domain Controllers (that are probably your DNS servers)

  

  

• Question 39:

  Your network contains a single Active Directory site.

  You plan to deploy 1,000 new computers that will run Windows 7 Enterprise. The new computers have Preboot Execution Environment (PXE) network adapters.

  You need to plan the deployment of the new computers to meet the following requirements:

  

  Support 50 simultaneous installations of Windows 7

  

  Minimize the impact of network operations during the deployment of the new computers

  

  Minimize the amount of time required to install Windows 7 on the new computers

  What should you include in your plan?

  A. Deploy the Windows Deployment Services (WDS) server role. Configure the IP Helper tables on all routers.
  B. Deploy the Windows Deployment Services (WDS) server role. Configure each WDS server by using native mode.
  C. Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature. Configure the Transport Server to use a custom network profile.
  D. Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature. Configure the Transport Server to use a static multicast address range.
  D. Deploy the Windows Deployment Services (WDS) server role and the Transport Server feature. Configure the Transport Server to use a static multicast address range.

  ---

  http://technet.microsoft.com/en-us/library/cc726564%28WS.10%29.aspx http://technet.microsoft.com/en-us/library/cc725964%28WS.10%29.aspx

  WDS Multicast Server Updated: November 21, 2007 Applies To: Windows Server 2008 The multicast server deploys an image to a large number of client computers concurrently without overburdening the network. When you create a multicast transmission for an image, the data is sent over the network only once, which can drastically reduce the network bandwidth that is used.

  Using Transport Server Updated: May 8, 2008 Applies To: Windows Server 2008 This topic only applies to Windows Server 2008. If you have Windows Server 2008 R2, see Configuring Transport Server.

  You have two options when installing the Windows Deployment Services role in Windows Server 2008. You can install both the Deployment Server and Transport Server role services (which is the default) or you can install only the Transport Server role service. The second configuration is for advanced scenarios, such as environments without Active Directory Domain Services (AD DS), Domain Name System (DNS), or Dynamic Host Configuration Protocol (DHCP). You can configure Transport Server to enable you to boot from the network using Pre-Boot Execution Environment (PXE) and Trivial File Transfer Protocol (TFTP), a multicast server, or both. Note that Transport Server does not contain or support the Windows Deployment Services image store.

  Configure how to obtain IP addresses. If multiple servers are using multicast functionality on a network (Transport Server, Deployment Server, or another solution), it is important that each server is configured so that the multicast IP addresses do not collide. Otherwise, you may encounter excessive traffic when you enable multicasting. Note that each Windows Deployment Services server will have the same default range. To work around this issue, specify static ranges that do not overlap to ensure that each server is using a unique IP address, or configure each of the servers to obtain multicast addresses from a Multicast Address Dynamic Client Allocation Protocol (MADCAP) server.

  The server architectures are illustrated in the following diagram. The blue parts are installed with Transport Server and the Deployment Server. The grey parts are installed with the Deployment Server only. The yellow parts are not installed with either, but can be written using guidelines in the Windows SDK.

  

• Question 40:

  Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. There are five servers that run Windows Server 2003 SP2. The Windows Server 2003 SP2 servers have the Terminal Server

  component installed. A firewall server runs Microsoft Internet Security and Acceleration (ISA) Server 2006. All client computers run Windows 7.

  You plan to give remote users access to the Remote Desktop Services servers.

  You need to create a remote access strategy for the Remote Desktop Services servers that meets the following requirements:

  -Minimizes the number of open ports on the firewall server

  -

  Encrypts all remote connections to the Remote Desktop Services servers

  -

  Prevents network access to client computers that have Windows Firewall disabled What should you do?

  A. Implement port forwarding on the ISA Server. Implement Network Access Quarantine Control on the ISA Server.
  B. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and implement Network Access Protection (NAP).
  C. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and configure a Remote Desktop connection authorization policy (RD CAP).
  D. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and configure a Remote Desktop resource authorization policy (RD RAP).
  B. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and implement Network Access Protection (NAP).

  ---

  Terminal Services Gateway

  TS Gateway allows Internet clients secure, encrypted access to Terminal Servers behind your organization's firewall without having to deploy a Virtual Private Network (VPN) solution. This means that you can have users interacting with their corporate desktop or applications from the comfort of their homes without the problems that occur when VPNs are configured to run over multiple Network Address Translation (NAT) gateways and the firewalls of multiple vendors.

  TS Gateway works using RDP over Secure Hypertext Transfer Protocol (HTTPS), which is the same protocol used by Microsoft Office Outlook 2007 to access corporate Exchange Server 2007 Client Access Servers over the Internet. TS Gateway Servers can be configured with connection authorization policies and resource authorization policies as a way of differentiating access to Terminal Servers and network resources.

  Connection authorization policies allow access based on a set of conditions specified by the administrator; resource authorization policies grant access to specific Terminal Server resources based on user account properties.

  Network Access Protection You deploy Network Access Protection on your network as a method of ensuring that computers accessing important resources meet certain client health benchmarks. These benchmarks include (but are not limited to) having the most recent updates applied, having antivirus and anti-spyware software up to date, and having important security technologies such as Windows Firewall configured and functional. In this lesson, you will learn how to plan and deploy an appropriate network access protection infrastructure and enforcement method for your organization.