Microsoft 70-646 Online Practice Questions and Exam Preparation

Microsoft 70-646 Online Questions & Answers

• Question 71:

  Users frequently search for documents from the Start menu or in Windows Explorer. You need to recommend a solution to minimize the amount of time it takes for users in the Legal department to locate tiles stored on the Legal share. What should you include in the recommendation?

  A. Configure Windows Search Service on the client computers in the Legal department and add the Legal share to the file server library.
  B. Configure Windows Search Service on the file server and add the Legal share to the file server library.
  C. Configure Windows Search Service on the file server and add the Legal share to the client computers in the legal department.
  D. Configure Windows Search Service on the client computers in the Legal department and add the Legal share to the client library.
  C. Configure Windows Search Service on the file server and add the Legal share to the client computers in the legal department.

  ---

  Windows search can speed up searching through file shares by using indexing

  Topic 17, Trey Research

  Scenario

  COMPANY OVERVIEW

  Trey Research is a pharmaceutical company that has a main office and two branch offices. The main office is located in Denver. The branch offices are located in New York and Seattle. The main office has 10,000 users. Each branch office

  has approximately 200 users.

  PLANNED CHANGES

  You plan to deploy a new Application named App1. App1 is developed in-house. The binary executables and support files for App1 contain sensitive intellectual property.

  Users must access App1 through document invocation. The users must be prevented from directly copying or accessing the App1 program files.

  EXISTING ENVIRONMENT

  The network contains a single Active Directory domain named treyresearch.com.

  All servers run Windows Server 2008 R2. All client computers run Windows 7 Enterprise.

  The network contains a Web server named Web1 that hosts an intranet site. All users use Web1.

  Users report that access to the content on Web1 is slow. You discover that the CPU utilization of Web1 is approximately 90 percent during peak hours.

  Microsoft System Center Configuration Manager is used to deploy updates to all of the client computers.

  Existing Network Infrastructure

  Each office has several file servers. The file servers have a limited amount of storage space.

  Users access the data on all of the file servers.

  Each branch office has a WAN link to the main office. Users in the branch office frequently access the file server in the main office.

  Current Administration Model

  All servers are currently administered remotely by using Remote Desktop. Help desk users perform the following administrative tasks in the domain:

  -Manage printers.

  -Create shared folders.

  -Manage Active Directory users.

  -Modify file permissions and share permissions.

  All of the help desk users are members of a global group named HelpDesk. Business Goals

  Trey Research has the following business goals:

  -Minimize the cost of making changes to the environment.

  - Minimize the cost of managing the network infrastructure and the servers

  REQUIREMENTS

  Technical Requirements

  Trey Research plans to Virtualize all of the servers during the next three years.

  Trey Research must meet the following technical requirements for virtualization:

  -Simplify the management of all hardware.

  -Allocate CPU resources between virtual machines (VMs).

  -

  Ensure that the VMs can connect to multiple virtual local area networks (VLANs).

  -

  Minimize the amount of administrative effort required to convert physical servers to VMs.

  Trey Research must ensure that users can access content in the shared folders if a single server fails. The solution must also reduce the amount of bandwidth used to access the shared folders from the branch offices.

  Trey Research must meet the following technical requirements for the intranet site:

  -Improve response time for users.

  -Provide redundancy if a single server fails.

  Security Requirements

  A new corporate security policy states that only Enterprise Administrators are allowed to interactively log on to servers.

  User Requirements

  Users report that it is difficult to locate files in the shared folders across the network. The users want a single point of access for all of the shared folders in the company.

• Question 72:

  Your network consists of a single Active Directory domain. The domain contains three organizational units (OUs) named Test, Application, and Database. You need to redesign the layout of the OUs to support the following requirements:

  - Prevent Group Policy objects (GPOs) that are linked to the domain from applying to computers located in the Applications OU

  -

  Minimize the number of GPOs

  -

  Minimize the number of Ous What should you include in your design?

  A. Create a Starter GPO.
  B. Create a Windows Management Instrumentation (WMI) filter.
  C. Delegate permissions on the Application OU.
  D. Configure block inheritance on the Application OU.
  D. Configure block inheritance on the Application OU.

  ---

  Understanding Group Policy You already know that Group Policy settings contained in Group Policy objects (GPOs) can be linked to OUs, and that OUs can either inherit settings from parent OUs or block inheritance and obtain their specific settings from their own linked GPOs. You also know that some policies--specifically, security policies--can be set to "no override" so that they cannot be blocked or overwritten and force child OUs to inherit the settings from their parents.

• Question 73:

  Your company has a main office and a branch office. Your network contains a single Active Directory domain.

  The functional level of the domain is Windows Server 2008 R2. An Active Directory site exists for each office.

  All servers run Windows Server 2008 R2. You plan to deploy file servers in each office.

  You need to design a file sharing strategy to meet the following requirements:

  -Users in both offices must be able to access the same files.

  -

  Users in both offices must use the same Universal Naming Convention (UNC) path to access files.

  -

  The design must reduce the amount of bandwidth used to access files.

  -Users must be able to access files even if a server fails.

  What should you include in your design?

  A. A standalone DFS namespace that uses replication.
  B. A domainbased DFS namespace that uses replication.
  C. A multisite failover cluster that contains a server located in the main office and another server located in the branch office.
  D. A Network Load Balancing cluster that contains a server located in the main office and another server located in the branch office.
  B. A domainbased DFS namespace that uses replication.

  ---

  MCITP Self-Paced Training Kit Exam 70-646 Windows Server Administration:

  Domain-Based Namespaces

  You can create domain-based namespaces on one or more member servers or DCs in the same domain.

  Metadata for a domain-based namespaces is stored by AD DS. Each server must contain an NTFS volume to host the namespace. Multiple namespace servers increase the availability of the namespace and ensure failover protection. A domain-based namespace cannot be a clustered resource in a failover cluster. However, you can locate the namespace on a server that is also a node in a failover cluster provided that you configure the namespace to use only local resources on that server. A domain-based namespace in Windows Server 2008 mode supports access-based enumeration. Windows Server 2008 mode is discussed later in this lesson.

  You choose a domain-based namespace if you want to use multiple namespace servers to ensure the availability of the namespace, or if you want to make the name of the namespace server invisible to users.

  When users do not need to know the UNC path to a namespace folder it is easier to replace the namespace server or migrate the namespace to another server.

  If, for example, a stand-alone namespace called \\Glasgow\Books needed to be transferred to a server called Brisbane, it would become \\Brisbane\Books. However, if it were a domain-based namespace (assuming Brisbane and Glasgow are both in the Contoso.internal domain), it would be \\Contoso.internal\Books no matter which server hosted it, and it could be transferred from one server to the other without this transfer being apparent to the user, who would continue to use \\Contoso.internal\Books to access it.

  

• Question 74:

  You need to recommend a solution for monitoring the servers. The solution must meet the company's technical requirements. What should you include in the recommendation?

  A. Data Collector Sets (DCSs)
  B. event subscriptions
  C. Reliability Monitor
  D. Windows System Resource Manager (WSRM)
  A. Data Collector Sets (DCSs)

  ---

  http://technet.microsoft.com/en-us/library/cc771692%28WS.10%29.aspx

  Data Collector Sets An important new feature in Windows Reliability and Performance Monitor is the Data Collector Set, which groups data collectors into reusable elements for use with different performance monitoring scenarios. Once a group of data collectors is stored as a Data Collector Set, operations such as scheduling can be applied to the entire set through a single property change. You can schedule repeated collection of a Data Collector Set to create logs, load it in Performance Monitor to see the data in real time, and save it as a template to use on other computers.

  Windows Reliability and Performance Monitor also includes default Data Collector Set templates to help you begin collecting performance data immediately.

• Question 75:

  You need to implement a solution for the branch office file servers that meets the company's technical requirements. What should you implement on the branch office file servers?

  A. File Server Resource Manager (FSRM) quotas
  B. Network Policy Server (NPS) connection request policies
  C. NTFS disk quotas
  D. Windows System Resource Manager (WSRM) resource allocation policies
  A. File Server Resource Manager (FSRM) quotas

  ---

  http://technet.microsoft.com/en-us/library/cc766468%28WS.10%29.aspx

  Establishing audit policy is an important facet of security. Monitoring the creation or modification of objects gives you a way to track potential security problems, helps to ensure user accountability, and provides evidence in the event of a

  security breach.

  There are nine different kinds of events you can audit. If you audit any of these kinds of events, Windows?records the events in the Security log, which you can find in Event Viewer.

  Account logon events. Audit this to see each instance of a user logging on to or logging off from another computer in which this computer is used to validate the account. Account logon events are generated in the domain controller's Security

  log when a domain user account is authenticated on a domain controller. These events are separate from Logon events, which are generated in the local Security log when a local user is authenticated on a local computer. Account logoff

  events are not tracked on the domain controller.

  Account management. Audit this to see when someone has changed an account name, enabled or disabled an account, created or deleted an account, changed a password, or changed a user group.

  Directory service access. Audit this to see when someone accesses an Active Directory-directory service object that has its own system access control list (SACL).

  Logon events. Audit this to see when someone has logged on or off your computer (either while physically at your computer or by trying to log on over a network).

  Object access. Audit this to see when someone has used a file, folder, printer, or other object. While you can also audit registry keys, we don't recommend that unless you have advanced computer knowledge and know how to use the

  registry. Policy change. Audit this to see attempts to change local security policies and to see if someone has changed user rights assignments, auditing policies, or trust policies.

  Privilege use. Audit this to see when someone performs a user right.

  Process tracking. Audit this to see when events such as program activation or a process exiting occur.

  System events. Audit this to see when someone has shut down or restarted the computer, or when a process or program tries to do something that it does not have permission to do. For example, if malicious software tried to change a setting

  on your computer without your permission, system event auditing would record it.

  Topic 15, School of Fine Art

  Scenario

  COMPANY OVERVIEW

  School of Fine Art is an educational institution that has a main campus and two satellite campuses. The main campus is located in New York. The satellite campuses are located in Los Angeles and Chicago. The main campus has

  approximately 4,000 users made up of students, faculty, and employees. Each satellite campus has approximately 1,000 users made up of students, faculty, and employees.

  EXISTING ENVIRONMENT

  The network contains a single Active Directory domain named fineartschool.net.

  All servers run Windows Server 2008 R2. All client computers run either Windows XP or Windows 7.

  The network contains Microsoft Application Virtualization (App-V) and Microsoft Enterprise Desktop Virtualization (MED-V).

  Existing Network Infrastructure

  The main campus has the following servers:

  -

  A file server that contains confidential files

  -

  A print server that has several printers installed

  - A server that has the Windows Server Update Services (WSUS) server role installed All client computers are updated by using the WSUS server.

  The main campus has a computer lab. The lab has 50 client computers that run Windows 7 Enterprise.

  The computer accounts for the lab computers are located in an organizational unit (OU) named LabOU. The user accounts and computer accounts for all of the students are located in an OU named StudentsOU. Both OUs are child objects in

  the fineartschool.net domain.

  The relevant Group Policy objects (GPOs) are configured as shown in the following table.

  

  REQUIREMENTS

  Technical Requirements

  The computer lab must meet the following requirements:

  -Ensure that the user settings in all domain-level GPOs are App1ied to each student.

  -Prevent the settings in all domain-level GPOs from being App1ied to the client computers in the computer lab.

  The update management infrastructure must meet the following requirements:

  -Each campus must control the updates for its respective campus.

  -Update status reports must be sent weekly to the Enterprise Administrator on the main campus.

  Application Requirements

  All client computers will be upgraded to Windows 7 Enterprise.

  An Application named App1 runs on every client computer. App1 is only compatible with Windows XP. App1 must remain available after all of the operating system upgrades are complete.

  App1 must meet the following requirements:

  -App1 must be available from the Start menu.

  -The management of App1 must be centralized.

  -Each user must have a unique instance of App1.

  Security Requirements

  Security for the file server on the main campus must meet the following requirements:

  -Unauthorized users must be prevented from printing sensitive files stored on the server.

  -The contents of the server* s hard disks must remain secure if the physical security of the server is compromised.

  Problem Statements

  Users report that they receive a different desktop environment every time they log on to a client computer in the computer lab.

  The print server on the main campus has reliability issues. A malfunction on a single printer often causes other printers to malfunction.

• Question 76:

  Your network is configured as shown in the following diagram.

  

  You deploy an enterprise certification authority (CA) on the internal network. You also deploy a Microsoft Online Responder on the internal network. You need to recommend a secure method for Internet users to verify the validity of individual

  certificates.

  The solution must minimize network bandwidth.

  What should you recommend?

  A. Deploy a subordinate CA on the perimeter network.
  B. Install a standalone CA and the Network Device Enrollment Service (NDES) on a server on the perimeter network.
  C. Install a Network Policy Server (NPS) on a server on the perimeter network. Redirect authentication requests to a server on the internal network.
  D. Install Microsoft Internet Information Services (IIS) on a server on the perimeter network. Configure IIS to redirect requests to the Online Responder on the internal network.
  D. Install Microsoft Internet Information Services (IIS) on a server on the perimeter network. Configure IIS to redirect requests to the Online Responder on the internal network.

  ---

  http://www.ipsure.com/blog/2010/installation-and-configuration-of-active-directory-certificate-services-onwindows-server-2008-r2-1/ http://msdn.microsoft.com/en-us/library/cc732956.aspx

  

• Question 77:

  Your network consists of a single Active Directory site that includes two network segments. The network segments connect by using a router that is RFC 1542 compliant. You plan to use Windows Deployment Services (WDS) to deploy Windows Server 2008 R2 servers. All new servers support PreBoot Execution Environment (PXE).

  You need to design a deployment strategy to meet the following requirements:

  -Support Windows Server?2008 R2

  -Deploy the servers by using WDS in both network segments

  -Minimize the number of servers used to support WDS

  What should you include in your design?

  A. Deploy one server. Install WDS and DHCP on the server. Configure the IP Helper tables on the router between the network segments.
  B. Deploy two servers. Install WDS and DHCP on both servers. Place one server on each of the network segments. Configure both servers to support DHCP option 60.
  C. Deploy two servers. Install WDS and DHCP on both servers. Place one server on each of the network segments. Configure both servers to support DHCP option 252.
  D. Deploy two servers. Install WDS and DHCP on one server. Install DHCP on the other server. Place one server on each of the network segments. Configure both servers to support DHCP option 60.
  A. Deploy one server. Install WDS and DHCP on the server. Configure the IP Helper tables on the router between the network segments.

  ---

  http://support.microsoft.com/kb/926172

  IP Helper table updates

  The PXE network boot method uses DHCP packets for communication. The DHCP packets serve a dual purpose. They are intended to help the client in obtaining an IP address lease from a DHCP server and to locate a valid network boot

  server. If the booting client, the DHCP server, and the network boot server are all located on the same network segment, usually no additional configuration is necessary. The DHCP broadcasts from the client reach both the DHCP server and

  the network boot server.

  However, if either the DHCP server or the network boot server are on a different network segment than the client, or if they are on the same network segment but the network is controlled by a switch or a router, you may have to update the

  routing tables for the networking equipment in order to make sure that DHCP traffic is directed correctly.

  Such a process is known as performing IP Helper table updates. When you perform this process, you must configure the networking equipment so that all DHCP broadcasts from the client computer are directed to both a valid DHCP server

  and to a valid network boot server.

  Note: It is inefficient to rebroadcast the DHCP packets onto other network segments. It is best to only forward the DHCP packets to the recipients that are listed in the IP Helper table.

  After the client computer has obtained an IP address, it contacts the network boot server directly in order to obtain the name and the path of the network boot file to download. Again, this process is handled by using DHCP packets.

  Note: We recommend that you update the IP Helper tables in order to resolve scenarios in which the client computers and the network boot server are not located on the same network segment.

• Question 78:

  You are designing a highly available virtual environment running on Windows Server 2008 R2.

  The design must meet the following requirements:

  Provide high availability within the Production site to ensure that a failure of a node in the Production site does not stop the cluster from running.

  Provide the ability to withstand a failure of the Disaster Recovery (DR) site.

  Minimize the number of nodes and votes in the cluster.

  You need to design the virtual environment to meet the requirements.

  What should you do?

  To answer, drag the appropriate nodes and quorum configuration to the correct location or locations in the answer area.

  Select and Place:

  

  

  ---

  Having two nodes in the Production site provides high availability in that site.

  Node Majority (recommended for clusters with an odd number of nodes)

  Can sustain failures of half the nodes (rounding up) minus one. For example, a seven node cluster can sustain three node failures.

• Question 79:

  You need to recommend changes to the software deployment process that meet the company's technical requirements. What should you include in the recommendation?

  A. BranchCache in Distributed Cache mode
  B. BranchCache in Hosted Cache mode
  C. domain-based Distributed File System (DFS)
  D. standalone Distributed File System (DFS)
  C. domain-based Distributed File System (DFS)

  ---

  Software is installed and managed from a central location, so regardless of where a user is in the network the share for the installation files should appear to be the same, this is done using DFS Namespaces. There is one AD Domain and each Office also has 2 DCs so you can add the updated files in the HQ and then use DFS replication to replicate the new files to the branch namespace servers Distributed File System (DFS) Namespaces and DFS Replication offer simplified, highly-available access to files, load sharing, and WAN-friendly replication. In the Windows Server?2003 R2 operating system, Microsoft revised and renamed DFS Namespaces (formerly called DFS), replaced the Distributed File System snap-in with the DFS Management snap-in, and introduced the new DFS Replication feature. In the Windows Server-2008 operating system, Microsoft added the Windows Server 2008 mode of domain-based namespaces and added a number of usability and performance improvements.

  What does Distributed File System (DFS) do?

  The Distributed File System (DFS) technologies offer wide area network (WAN)-friendly replication as well as simplified, highly-available access to geographically dispersed files. The two technologies in DFS are the following:

  DFS Namespaces. Enables you to group shared folders that are located on different servers into one or more logically structured namespaces. Each namespace appears to users as a single shared folder with a series of subfolders. This structure increases availability and automatically connects users to shared folders in the same Active Directory Domain Services site, when available, instead of routing them over WAN connections.

  DFS Replication. DFS Replication is an efficient, multiple-master replication engine that you can use to keep folders synchronized between servers across limited bandwidth network connections. It replaces the File Replication Service (FRS) as the replication engine for DFS Namespaces, as well as for replicating the AD DS SYSVOL folder in domains that use the Windows Server 2008 domain functional level.

  in respect to answers A or B these may possibly work but this test http://www.sustainableit.co.za/wp-content/uploads/downloads/2010/09/Is_BranchCache_right_for_software_distribution.pdf would suggest its not the most efficient solution.

• Question 80:

  You are planning to deploy new servers that will run Windows Server 2008 R2. Each server will have 32 GB of RAM. The servers must support installation of the following role services:

  -Routing and Remote Access

  -Remote Desktop Services Gateway

  -Minimize CPU and RAM usage

  You need to deploy the minimum edition of Windows Server 2008 R2 that meets the requirements.

  What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)

  A. A Server Core installation of Windows Server 2008 R2 Datacenter.
  B. A Full Installation of Windows Server 2008 R2 Enterprise.
  C. A Full Installation of Windows Server 2008 R2 Standard.
  D. A Server Core installation Windows Server 2008 R2 Web.
  C. A Full Installation of Windows Server 2008 R2 Standard.