Microsoft 70-680 Online Practice Questions and Exam Preparation

Microsoft 70-680 Online Questions & Answers

• Question 441:

  You create a new virtual hard disk (VHD) on a Windows 7 Enterprise computer. Then you install Windows 7 on the VHD.

  After you reboot the computer, the Windows 7 boot menu shows two different Windows 7 installations titled "Windows 7".

  You need to ensure that the Windows 7 boot menu differentiates between the two Windows 7 installations.

  What should you do?

  A. Add a boot image in WDS.
  B. Run the ImageX command with the /Mount parameter.
  C. Run thePEImg/Prep command.
  D. Use Sysprep with ar\ answer file and set the UpdatelnstalledDrivers option in the answer file to No.
  E. Run the DiskPart command and the Attach command option.
  F. Create a capture image in WDS.
  G. Run the Dism command with the /Mount-Wimoption.
  H. Run the BCDEdit command.
  I. Run the Dism command with the /Add-Package option.
  J. Run the Dism command with the /Add-Driver option.
  H. Run the BCDEdit command.

• Question 442:

  Your network consists of a single Active Directory domain named contoso.com.

  You have a server named Server1 that runs a custom network application.

  Server1 has the following IP addresses:

  

  192.168.15.10

  

  192.168.15.11

  You need to ensure that a client computer resolves server1.contoso.com to only the 192.168.15.11 IP address.

  What should you do from the computer?

  A. Edit the hosts file
  B. Edit the lmhosts file
  C. Run Ipconfig.exe /flushdns
  D. Run Netsh interface ipv4 reset
  A. Edit the hosts file

  ---

  Differences Between the HOSTS and LMHOSTS Files in Windows NT In Windows NT, the HOSTS file is for TCP/IP utilities, and the LMHOSTS file is for LAN Manager NET utilities. If you cannot PING another computer (using a friendly

  name), check the HOSTS file. If you cannot NET VIEW a server using only the TCP/ IP protocol, check the LMHOSTS file.

  Hosts file

  The Hosts file is a common way to resolve a host name to an IP address through a locally stored text file that contains IP-address-to-host-name mappings. On most UNIX-based computers, this file is /etc/hosts. On Windows-based

  computers, this file is the Hosts file in the systemroot\System32\Drivers\Etc folder. The following describes the attributes of the Hosts file for Windows: A single entry consists of an IP (IPv4 or IPv6) address and one or more host names. The

  Hosts file is dynamically loaded into the DNS client resolver cache, which Windows Sockets applications use to resolve a host name to an IP address on both local and remote subnets. When you create entries in the Hosts file and save it, its

  contents are automatically loaded into the DNS client resolver cache. The Hosts file contains a default entry for the host name localhost. The Hosts file can be edited with any text editor. Each host name is limited to 255 characters. Entries in

  the Hosts file for Windowsbased computers are not case sensitive. The advantage of using a Hosts file is that users can customize it for themselves. Each user can create whatever entries they want, including easy-to-remember nicknames

  for frequently accessed resources. However, the individual maintenance required for the Hosts file does not scale well to storing large numbers of FQDN mappings or reflecting changes to IP addresses for servers and network resources. The

  solution for the large-scale storage and maintenance of FQDN mappings is DNS. The solution for the maintenance of FQDN mappings for changing IP addresses

  is DNS dynamic update.

  NOT LMHOSTS File

  The LMHOSTS file is a local text file that maps IP addresses to NetBIOS names of remote servers with which you want to communicate over the TCP/IP protocol.

  Windows recognizes names instead of IP addresses for network requests and a name discovery process is used to correctly route network requests with TCP/IP.

  Because the name discovery process is generally not routed by an IP router, the LMHOSTS file allows Windows machines to communicate using TCP/IP across a subnet.

  -

  LMHOSTS contains IP address to "NetBIOS over TCP/IP" name translations.

  -

  LMHOSTS is only used by the NBT (NetBIOS over TCP/IP) interface.

  -

  LMHOSTS file contains some valuable additions to the LAN Manager and Windows for Workgroups

  -

  LMHOSTS file, such as the ability to support routed domain logon validation.

  -

  LMHOSTS contains static information about TCP/IP addresses, but using logon scripts and/or the replicator service, the "master" file can be distributed transparently across all stations.

  -

  By default, the LMHOSTS file should be located in the directory %SYSTEMROOT %\SYSTEM32\DRIVERS \ETC (usually C:\WINNT\SYSTEM32\DRIVERS\ETC).

  Other info http://support.microsoft.com/ kb/105997

• Question 443:

  Your network consists of an Active Directory domain and 100 computers that run Windows 7.

  The domain contains a logon script named logon.cmd.

  You plan to deploy a new application named app1.msi by using the logon script. App1.msi is stored in \\server1\share1.

  You need to modify the logon script to deploy the application.

  What should you include in the logon script?

  A. Sbdinst.exe -u \\server1\share1\app1.msi -q
  B. Msinfo32.exe \\server1\share1\app1.msi
  C. Pkgmgr.exe /ip /m:\\server1\share1\app1.msi
  D. Msiexec.exe /i \\server1\share1\app1.msi /quiet
  D. Msiexec.exe /i \\server1\share1\app1.msi /quiet

  ---

  Msiexec

  Provides the means to install, modify, and perform operations on Windows Installer from the command line.

  To install or configure a product Syntax

  msiexec /i {package|ProductCode}

  /i : Installs or configures a product.

  NOT Msinfo32

  Displays a comprehensive view of your hardware, system components, and software environment.

• Question 444:

  A user is attempting to connect to a secure remote Microsoft SQL database on a computer running Windows 7 Professional. The computer communicates on port 1433. A rule in Windows Firewall with Advanced Security allows communication. The user cannot connect to the database on the currently defined protocol due to an error in protocol type. You need to ensure that users can connect to the database.

  Which setting should you choose? (To answer, select the appropriate setting in the work area.)

  Hot Area:

  

  

  ---

  If a computer is running Microsoft SQL database, then firewall must permit communication through TCP port 1433. Therefore, change the protocol type from UDP to TCP.

  To open a port in the Windows firewall for TCP access.

  On the Start menu, click Run, type firewall.cpl and then click OK.

  In the Windows Firewall dialog box, click the Exceptions tab, and then click Add Port.

  In the Add a Port dialog box, in the Name text box, type SQL Server .

  In the Port number text box, type the port number of the instance of the Database Engine, such as 1433 for the default instance.

  Verify that TCP is selected, and then click OK.

• Question 445:

  A computer that runs Windows XP has one partition.

  You install Windows 7 on the computer.

  You need to migrate a user profile from the Windows XP installation to the Windows 7 installation.

  What should you do? (To answer, drag the appropriate command from the list of commands to the correct location or locations in the work area.)

  Select and Place:

  

  

• Question 446:

  You have a computer named Computer1 that runs Windows 7. You plan to migrate the user state on Computer1 by using User State Migration Tool (USMT) 4.0.

  You need to identify which user documents will be included in the migration.

  What should you do?

  A. Run Usmtutils.exe and use the /ec option.
  B. Run Sysprep.exe and use the /audit option.
  C. Run Loadstate.exe and use the /v:12 option.
  D. Run Scanstate.exe and use the /genmigxml option.
  D. Run Scanstate.exe and use the /genmigxml option.

  ---

  ScanState You run ScanState on the source computer during the migration. You must run ScanState.exe on computers running Windows Vista and Windows 7 from an administrative command prompt. When running ScanState on a source computer that has Windows XP installed, you need to run it as a user that is a member of the local administrators group. The following command creates an encrypted store named Mystore on the file share named Migration on the file server named Fileserver that uses the encryption key Mykey: scanstate \\fileserver\migration\mystore /i:migapp.xml /i:miguser.xml /o /config:config.xml /encrypt /key:"mykey"

  /genmigxml: path to a file This option specifies that the ScanState command should use the document finder to create and export an .xml file that defines how to migrate all of the files on the computer on which the ScanState command is running.

• Question 447:

  A company has Windows 7 Enterprise computers that use BitLocker drive encryption on operating system drives.

  You need to configure multi-factor authentication before client computers are booted into Windows.

  On each client computer, what should you do?

  A. Require the use of a startup key.
  B. Implement fingerprint authentication.
  C. Implement a Dynamic Password Policy.
  D. Implement a Dynamic Access Control policy.
  E. Configure a TPM PIN.
  E. Configure a TPM PIN.

  ---

  BitLocker supports multifactor authentication for operating system drives. If you enable BitLocker on a computer that has a TPM version 1.2, you can use additional forms of authentication with the TPM protection. BitLocker offers the option to lock the normal boot process until the user supplies a personal identification number (PIN) or inserts a USB device (such as a flash drive) that contains a BitLocker startup key, or both the PIN and the USB device can be required. These additional security measures provide multifactor authentication and help ensure that the computer will not start or resume from hibernation until the correct authentication method is presented.

• Question 448:

  You work with Windows 7 computers.

  Your company has a policy of not allowing software to be upgraded without proper authorization from the managers.

  You set a Software Restriction Policy to allow only a certain version of Microsoft Word 2010 to run. The policy of the Local Group Policy Editor is shown in the Policy Editor exhibit. (Click the Exhibit button.)

  

  Additionally, the hash policy for WmWord. exe is shown in the Hash Policy exhibit. (Click the Exhibit button. )

  

  Any upgrades or change to the WinWord.exe will result in the program not operating.

  When you attempt to run MS Word, the program does not execute. The error is shown in the Hashblock exhibit. (Click the Exhibit button.)

  

  Consider each of the following statements. Does the information in the three statements support the inference as stated? (This question is worth three points. )

  Hot Area:

  

  

• Question 449:

  You have a computer that runs windows 7.

  You have a third-party application.

  You need to ensure that only a specific version of the application runs on the computer. You have the application vendor's digital signature.

  What should you do?

  A. From Application Control Policies, configure a path rule.
  B. From Application Control Policies, configure a publisher rule.
  C. From Software Restriction policies, configure a path rule.
  D. From Software Restriction policies, configure a certificate rule.
  B. From Application Control Policies, configure a publisher rule.

  ---

  AppLocker Application Control Policies

  AppLocker is a feature new to Windows 7 that is available only in the Enterprise and Ultimate editions of the product. AppLocker policies are conceptually similar to Software Restriction Policies, though AppLocker policies have several

  advantages, such as the ability to be applied to specific user or group accounts and the ability to apply to all future versions of a product. As you learned earlier in this chapter, hash rules apply only to a specific version of an application and

  must be recalculated whenever you apply software updates to that application. AppLocker policies are located in the Computer Configuration\Windows Settings\ Security Settings \Application Control Policies node of a standard Windows 7 or

  Windows Server 2008 R2 GPO. AppLocker relies upon the Application Identity Service being active. When you install Windows 7, the startup type of this service is set to Manual. When testing AppLocker, you should keep the startup type as

  Manual in se you configure rules incorrectly. In that event, you can just reboot the computer and the AppLocker rules will no longer be in effect. Only when you are sure that your policies are applied correctly should you set the startup type of

  the Application Identity Service to Automatic. You should take great care in testing AppLocker rules because it is possible to lock down a computer running Windows 7 to such an extent that the computer becomes unusable. AppLocker

  policies are sometimes called application control policies.

  AppLocker Application Control Policies - Publisher Rules Publisher rules in AppLocker work on the basis of the code-signing certificate used by the file's publisher.

  Unlike a Software Restriction Policy certificate rule, it is not necessary to obtain a certificate to use a publisher rule because the details of the digital signature are extracted from a reference application file. If a file has no digital signature, you

  cannot restrict or allow it using AppLocker publisher rules. Publisher rules allow you more flexibility than hash rules because you can specify not only a specific version of a file but also all future versions of that file. This means that you do not

  have to re-create publisher rules each time you apply a software update because the existing rule remains valid. You can also allow only a specific version of a file by setting the Exactly option.

  AppLocker Application Control Policies - Path Rules

  AppLocker path rules work in a similar way to Software Restriction Policy path rules. Path rules let you specify a folder, in which case the path rule applies to the entire contents of the folder, including subfolders, and the path to a specific file.

  The advantage of path rules is that they are easy to create. The disadvantage of path rules is that they are the least secure form of AppLocker rules. An attacker can subvert a path rule if they copy an executable file into a folder covered by a

  path rule or overwrite a file that is specified by a path rule. Path rules are only as effective as the file and folder permissions applied on the computer.

  Software Restriction Policies

  Software Restriction Policies is a technology available to clients running Windows 7 that is available in Windows XP, Windows Vista, Windows Server 2003, and Windows Server 2008. You manage Software Restriction Policies through Group

  Policy. You can find Software Restriction Policies in the Computer Configuration \Windows Settings\Security Settings\Software Restriction Policies node of a group policy. When you use Software Restriction Policies, you use the Unrestricted

  setting to allow an application to execute and the Disallowed setting to block an application from executing. You can achieve many of the same application restriction objectives with Software Restriction Policies that you can with AppLocker

  policies. The advantage of Software Restriction Policies over AppLocker policies is that Software Restriction Policies can apply to computers running Windows XP and Windows Vista, as well as to computers running Windows 7 editions that

  do not support AppLocker. The disadvantage of Software Restriction Policies is that all rules must be created manually because there are no built-in wizards to simplify the process of rule creation.

  Software Restriction Policies - Path Rules

  Path rules, allow you to specify a file, folder, or registry key as the target of a Software Restriction Policy. The more specific a path rule is, the higher its precedence. For example, if you have a path rule that sets the file C: \Program files

  \Application\App.exe to Unrestricted and one that sets the folder C:\Program files\Application to Disallowed, the more specific rule takes precedence and the application can execute. Wildcards can be used in path rules, so it is possible to

  have a path rule that specifies C:\Program files\Application\*.exe. Wildcard rules are less specific than rules that use a file's full path. The drawback of path rules is that they rely on files and folders remaining in place. For example, if you

  created a path rule to block the application C:\Apps\Filesharing.exe, an attacker could execute the same application by moving it to another directory or renaming it something other than Filesharing.exe.

  Path rules work only when the file and folder permissions of the underlying operating system do not allow files to be moved and renamed.

  Software Restriction Policies - Certificate Rules

  Certificate rules use a code-signed software publisher's certificate to identify applications signed by that publisher. Certificate rules allow multiple applications to be the target of a single rule that is as secure as a hash rule. It is not necessary

  to modify a certificate rule in the event that a software update is released by the vendor because the updated application will still be signed using the vendor's signing certificate. To configure a certificate rule, you need to obtain a certificate

  from the vendor. Certificate rules impose a performance burden on computers on which they are applied because the certificate's validity must be checked before the application can execute. Another disadvantage of certificate rules is that

  they apply to all applications from a vendor. If you want to allow only 1 application from a vendor to execute but the vendor has 20 applications available, you are better off using a different type of Software Restriction Policy because otherwise

  users can execute any of those other 20 applications.

• Question 450:

  You work in an international company which is named Wiikigo. Before entering this company, you have two years of experience in the IT field, as well as experience implementing and administering any Windows client operating system in a networked environment.

  You are professional in installing, upgrading and migrating to Windows 7, deploying Windows 7, and configuring Hardware and Applications and son on.

  You have a workgroup which contains five computers. Windows 7 is run by the computers. A computer named C01 has video and audio files.

  You have to share C01s video and audio files on the network.

  What should you do? (Choose more than one) A. Connect a removable drive and enable BitLocker To Go.

  B. A HomeGroup should be created.
  C. The files should be moved to a Media Library.
  D. All BranchCache rules should be enabled in Windows Firewall.
  B. A HomeGroup should be created.
  C. The files should be moved to a Media Library.