Q1. Your company has an Active Directory Domain Services (AD DS) forest with a single domain named contoso.com.
You deploy a new Group Policy object (GPO) named NY Computers GPO as part of the organizational unit (OU) and GPO design shown in the following diagram.
The NY Computers GPO contains computer configuration settings and user configuration settings.
User configuration settings are not being applied to users who log on to client computers in the NY Computers OU.
You need to ensure that user configuration settings are being applied.
What should you do?
A. Enable user configuration settings in the Default Domain Policy GPO.
B. Enable loopback processing in the NY Computers GPO.
C. Enable user configuration settings in the NY Computers GPO.
D. Enable loopback processing in the Default Domain Policy GPO.
Answer: B
Explanation:
refer to Planning and managing windows 7 desktop deployments and environment Pg 10-92
Q2. You are planning a Windows 7 deployment infrastructure for a new company.
You have the following requirements:
Three domains
10,000 client computers
No user interaction
You need to recommend a deployment infrastructure.
What should you recommend?
A. Deploy Microsoft System Center Configuration Manager 2007 R2. Design a zero-touch installation.
B. Deploy Microsoft System Center Virtual Machine Manager. Design a lite-touch installation.
C. Deploy Microsoft System Center Operations Manager 2007 R2. Design a lite-touch installation.
D. Deploy Microsoft Deployment Toolkit (MDT) 2010. Design a zero-touch installation.
Answer: A
Explanation:
Hints:
no user interaction = zero touch
Topic 2, Scenario A
Background
You are the desktop architect for a company with 14,000 client computers. Some client computers are portable computers and some are desktop computers. All client computers currently run Windows XP. You are in the evaluation phase for upgrading to Windows 7. Approximately half of the Carlsbad and Madrid offices are used by sales employees. Sales employees report to the office only once per quarter. Your company has users in offices as shown in the following table.
The address for the SharePoint site is https://intranet.company.com.
Each location has gigabit network connections to the desktop except Madrid, which has 100 megabit connections. Each office has a Dynamic Host Configuration Protocol (DHCP) server and uses multiple VLANs.
You use Group Policy objects (GPOs) to manage various settings. The following figure displays the Organizational Unit (OU) layout for the Active Directory Domain Services (AD DS) domain.
Each office has two connections, a data center WAN link and an Internet connection. Each office connects to a central data center facility with connection speeds as shown in the following table.
You currently use one of each client computer model to create and maintain a disk image for each model. The models supported by your company are listed in the following table.
You currently use a third-party disk imaging application to capture and deploy new Windows XP computers. Desktop administrators use optical media to deploy the image to new or repurposed client computers. The current Windows XP image is about 11 GB in size, which includes 2 GB of applications and 9 GB of Windows XP files.
Business Requirements
The deployment of Windows 7 must meet the following business requirements:
Deployment requirements:
The deployment must maximize the use of existing client computers. The deployment must
reduce the amount of time spent updating client computers after deployment.
Technical Requirements
The application must meet the following technical requirements:
Infrastructure requirements:
The amount of disk space required to store deployment images must be reduced. The number of images that need to be copied across WAN links must be reduced. You are based in the Los Angeles office and use the Microsoft Deployment Toolkit. You have a file server hosting a deployment share in Los Angeles.
Application compatibility:
-All current applications must be supported on Windows 7.
-All offices are moving to a new finance application in the next six months. The new finance application installs and runs correctly on Windows 7.
Migration requirements:
-The deployment cannot require users to store their files on a network or external drive for the migration. Only system administrators can be allowed to install applications. User data must be migrated during upgrades to Windows 7. There is a small budget for hardware upgrades when required.
Image maintenance:
-You need to minimize the re-arm passes.
Security
-Each location has a security group made up of the desktop computer objects in that location.
-Users must not be able to change their web browser or client computer security settings.
-Your requirements are as follows:
A startup PIN and TPM are required for all BitLocker users.
Local regulations prohibit the use of BitLocker for all computers in the Munich office. This supersedes any other requirement.
All laptops within the company must have BitLocker enabled.
All Madrid desktops must have BitLocker enabled.
No other desktops besides Madrid should have Bitlocker enabled.
-Computers in office lobbies are not permitted to join the domain.
-You need to block the use of ActiveX controls for all external websites.
Q3. A company has 1,000 computers in the main office and 20 computers in store kiosks. All the computers run Windows 7 Enterprise. The kiosk computers do not have network connections.
The company brands the Microsoft Internet Explorer program window on all computers by displaying the company logo at the left end of the title bar. The company changes its logo.
You have the following requirements:
. Display the new logo on the Internet Explorer program window title bar on the main office computers and the kiosk computers.
. Modify the search providers that are available to main office computers.
You need to define Internet Explorer settings to support the requirements.
Which two actions should you perform in sequence? (To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.)
Answer:
Q4. DRAG DROP
You are the desktop architect for an enterprise organization with computers that run Windows 7.
You need to create a Group Policy object (GPO) to prevent Windows Explorer from starting until all logon scripts have finished.
Which setting should you select? To answer, select the appropriate setting in the work area.
Answer:
Q5. Your company infrastructure includes a Windows Server 2008 R2 file server and 1,000 Windows 7 Enterprise client computers.
The company wants to require a secure connection between client computers and the file server.
You need to create and deploy a Group Policy object (GPO) that includes a rule for Windows Firewall with Advanced Security.
What should you do?
A. Create an Isolation rule and specify Request authentication for inbound and outbound connections.
B. Create a Tunnel rule and specify Gateway-to-client as the tunnel type.
C. Create a Server-to-server rule and specify the endpoints as Any IP address and the file server IP address.
D. Create an Authentication exemption rule and add the file server IP address to the Exempt Computers list.
Answer: C
Explanation:
The PDC emulator master also serves as the machine to which all domain controllers in the domain will synchronise their clocks. It, in turn, should be configured to synchronise to an external NTP time source http://en.wikipedia.org/wiki/Primary_Domain_Controller
Q6. Your company plans to upgrade 1,000 client computers to Windows 7.
The company uses a custom line-of-business application that is frequently updated.
The application is not compatible with Windows 7.
You need to ensure that the company can use the application.
You also need to ensure that the application can be updated with the least amount of administrative effort.
What should you do?
A. Deploy Microsoft Enterprise Desktop Virtualization (MED-V) v2 to all Windows 7 client computers, and distribute the virtual machine image and updates through MED-V TrimTransfer.
B. Deploy Microsoft Enterprise Desktop Virtualization (MED-V) v2 to all Windows 7 client computers, and distribute the virtual machine image and updates through Microsoft System Center Configuration Manager.
C. Configure Windows XP Mode on all Windows 7 client computers, and distribute the virtual machine image and updates through a file share resource.
D. Configure Windows XP Mode on all Windows 7 client computers, and distribute the virtual machine image and updates through Microsoft System Center Configuration Manager.
Answer: B
Q7. Your company has a single Active Directory Domain Services (AD DS) domain and 1,000 Windows 7 computers.
You are planning to deploy a custom application.
You need to schedule the deployment to occur outside of business hours and without user interaction.
Which deployment method should you choose?
A. Lite Touch Installation
B. software deployment with Microsoft System Center Configuration Manager 2007
C. software installation with Group Policy
D. Microsoft Application Virtualization (App-V)
Answer: B
Explanation:
Microsoft System Center Configuration Manager 2007 able to set schedule to deploy (text book) hints: without user interaction = zero touch
Q8. You use the Microsoft Deployment Toolkit (MDT) 2010 to create a Windows 7 test image. You deploy the image by using a USB flash drive. The Windows 7 deployment includes a custom task sequence to install a new finance application from the deployment share.
You need to deploy the image in the Munich office by using Zero Touch Installation.
What should you do?
A. Install System Center Configuration Manager (ConfigMgr) 2007 in the Munich office. Configure a deployment point and configure the network for PXE. Recapture the MDT image and create a task sequence for the finance application.
B. Install System Center Configuration Manager (ConfigMgr) 2007 in the Carlsbad office. Configure a deployment point and configure the network for PXE. Recapture the MDT image with the finance application installed.
C. Install a new deployment share in the Munich office. Create a Windows PE boot disk with network drivers. Recapture the MDT image and create a task sequence for the finance application. Create a custom script that can map a drive to the deployment share and start Setup.
D. Install a new deployment share in the Munich office. Configure a deployment point and configure the network for PXE. Recapture the MDT image and create a task sequence for the finance application.
Answer: A
Q9. Users with newly deployed Windows 7 computers see a security prompt when they attempt to upload documents to the company's intranet site.
You need to suppress the prompt without creating a security risk for the company.
What should you do? (Choose all that apply).
A. Modify the GPO to set https://intranet.company.com with a value of 1 in the Site to Zone Assignment List.
B. Modify the default Windows 7 image to add the Internet Explorer Enhanced Security Configuration component.
C. Modify the default Windows 7 image to change the default Internet Explorer security level to Medium Low.
D. Modify the default Windows 7 image to disable the Internet Explorer Automatically Detect Intranet Network setting.
E. Create a GPO and link it to the root of the domain.
F. Modify the GPO to set the web server's NEtBIOS name with a value of 2 in the Site to Zone Assignment List.
Answer: A,F
Q10. You are planning to deliver VDI by using the companys virtualization infrastructure.
You need to ensure that VDI users are always reconnected to the same VDI session.
What should you recommend?
A. Deploy the App-V desktop client.
B. Add the VmHostAgent role service.
C. Deploy the App-V Sequencer.
D. Install Windows Server 2008 R2 Datacenter with the Hyper-V role.
Answer: B