Q1. This is the first in a series of questions that all present the same scenario. For your convenience, the scenario is repeated in each question. Each presents a different goal and answer choices, but the text of the scenario is exactly the same in each in this series.

Topic 5, Alpine Ski House

Scenario:

You are an enterprise desktop support technician for Alpine Ski House.

Alpine Ski House manages chalets in ski resorts around the world. The main office is located in Vancouver.

Chalets are located in Japan, France, and Australia. Alpine Ski House has 500 employees.

Active Directory Configuration

The network contains an Active Directory forest. The forest contains a domain named alpineskihouse.com.

The network contains four Active Directory sites. All sites have high-speed Internet connections and connect to each other by using VPNs. The site information is shown in the following table.

Server Configuration

All servers run Windows Server 2008 R2. The relevant servers are configured as shown in the following table:

Computer Information

All corporate computers run Windows 7 Professional and are joined to the alpineskihouse.com domain. All corporate users can access the internal network remotely by using a VPN connection. The VPN connection requires the use of a smart card.

During the next year, Alpine Ski House plans to replace the existing VPN with DirectAccess. The company is running a pilot project to test DirectAccess for users in France.

Each chalet contains five public computers that run Windows 7 Ultimate. Guests use the public computers to access the Internet. The public computers are members of a workgroup. Every week, a standard image of Windows 7 Ultimate is re-applied to the computers.

The help desk reports that remote desktop connections are not enabled on the public computers in the chalets. 

Consequently, the help desk must instruct local staff to enable remote desktop connections on each public computer.

You need to ensure that remote desktop connections are enabled when public computers are deployed in the chalets.

What should you do?

A.

D.

View Answer

Q6. The help desk technicians discover that some computers have not installed the latest updates for Windows. The Windows Update log files on the computers show that to complete the installation of several updates the computers must be restarted.

You need to ensure that future updates are successfully installed on all computers.

What should you request?

A. the logon hours for all user accounts be set from 06:00 to 22:00

B. the Delay Restart for scheduled installations setting in the WSUS Policy GPO be set to disabled

C. the Allow Automatic Updates immediate installation setting in the WSUS Policy GPO be set to enabled

D. the No auto-restart with logged on users for scheduled automatic updates installations setting in the WSUS Policy GPO be set to disabled

View Answer

Q7. The help desk reports that they receive many calls from remote users who cannot access Internet Web sites while they are connected to the VPN. The help desk instructs the users to manually configure the VPN connection so that the users can access Internet Web sites while connected to the VPN.

You need to provide a recommendation to reduce the number of calls to the help desk regarding this issue.

What should you recommend?

A. Deploy a Network Policy Server (NPS).

B. Replace the SSTP-based VPN with a PPTP-based VPN.

C. Issue computer certificates from a trusted root certification authority (CA) to all remote users.

D. Create and distribute Connection Manager Administration Kit (CMAK) profiles to all remote users.

View Answer

Q8. A user at the Headquarters site is able to run .bat files on LAPTOP01. However, you notice that the AppLockdown GPO was successfully applied to the computer.

You need to ensure that the user's computer complies with the existing AppLockdown GPO settings.

Which service should you start on LAPTOP01?

A. Application Experience

B. Application Identity

C. Application Management

D. Application Information

View Answer

Q9. All client computers on your company network run Windows XP and are members of an Active Directory Domain Services domain.

You plan to migrate all computers to Windows 7. You also plan to deploy a new VPN server to support remote network access for the computers.

You need to ensure that all computers will be supported for remote access during the migration to Windows

What should you do?

A. Set the VPN server to Layer 2 Tunneling Protocol.

B. Set the VPN server to Secure Socket Tunneling Protocol.

C. Set the VPN server to Internet Key Exchange version 2.

D. Configure the Direct Access feature on the VPN server.

View Answer

Q10. This is the first in a series of questions that all present the same scenario. For your convenience, the scenario is repeated in each question. Each presents a different goal and answer choices, but the text of the scenario is exactly the same in each in this series.

Topic 1, Consolidated Messenger

Scenario:

You are an enterprise desktop support technician for Consolidated Messenger.

Network Configuration

The company has three offices named Office1, Office2, and Office3. The offices connect to each other over the Internet by using VPN connections. Each office has an 802.11g wireless access point. All wireless access points are configured to use Radius01 for authentication.

Active Directory Configuration

The network contains one Active Directory domain named consolidatedmessenger.com. The relevant organizational unit structure is shown in the following diagram:

Client Configuration

Each office has 500 desktop computers that run Windows 7 Enterprise.

There are 250 mobile users that travel regularly between all three offices. The mobile users have laptop computers that run Windows 7 Enterprise.

To prevent the spread of malware, the company restricts the use of USB devices and only allows the use of approved USB storage devices.

Printers

The marketing group has several printers that are shared on File01. A shared printer name Printer1 is a high-performance, black-and-white printer. A shared printer named Printer2 is a high-definition, photo-quality, color printer. Printer2 should only be used to print marketing brochures.

The chief financial officer (CFO) releases new guidelines that specify that only users from Finance are allowed to run FinanceApp1.

Users in the Marketing OU report that they can run FinanceApp1.

You need to ensure that only users in the Finance OU can run FinanceApp1.

What should you do?

A. In the AllComputers GPO, create a new AppLocker executable rule.

B. In the Desktops GPO and the Laptops GPO, create a new Windows Installer rule.

C. In the AllComputers GPO, create a software restriction policy and define a new hash rule.

D. In the Desktops GPO and the Laptops GPO, create a software restriction policy and define a new path rule.

View Answer