Mcitp 70-646: Windows Server Administration

Front 1

Minimum Windows Server 2008 hardware requirements

Back 1

1 GHz CPU (x86) or 1.4 GHz CPU (x64)
512 MB RAM
15 GB Disk Space

Front 2

Server 2008 Standard maximum supported RAM/CPUs

Back 2

x86 - 4 GB RAM - 4
x64 - 32 GB RAM - 4

Front 3

Server 2008 Enterprise maximum supported RAM/CPUs

Back 3

x86 - 64 GB RAM - 8
x64 - 2 TB RAM - 8

Front 4

Server 2008 Datacenter maximum supported RAM/CPUs

Back 4

x86 - 64 GB RAM and 32 CPUs
x64 - 2 TB RAM and 64 CPUs

Front 5

Server 2008 Web maximum supported RAM/CPUs

Back 5

x86 - 4 GB RAM and 4 CPUs
x64 - 32 GB RAM and 4 CPUs

Front 6

Benefits of using Server Core

Back 6

Reduced attack surface

Lower hardware requirements

Front 7

Command-line command that lists all server roles installed and available

Back 7

oclist.exe

Front 8

Command-line command that can be used to install roles

Back 8

ocsetup.exe

Front 9

If you wish to perform an upgrade to Server 2008, what OS must you perform the upgrade from?

Back 9

Server 2003

Front 10

Two purposes BitLocker serves

Back 10

Full volume encryption

Integrity-checking to ensure boot environment has not been tampered with

Front 11

Planning for BitLocker requires creating an extra partition of what size?

Back 11

1.5 GB

Front 12

Where are BitLocker group policies located?

Back 12

Computer Configuration\Policies\Administrative Templates\Windows Components\BitLocker Drive Encryption

Front 13

What GPO can be configured to allow for BitLocker usage with a USB key when no TPM is present?

Back 13

Setup: Enable Advanced Startup Options

Front 14

Encrypts an entire hard drive

Back 14

BitLocker

Front 15

Encrypts individual files and folders

Back 15

EFS

Front 16

What two options do you have for removing BitLocker?

Back 16

Disable - Removes but doesnt decrypt

Decrypt - Removes and decrypts

Front 17

What command line command can be issued to initiate the installation of a domain controller?

Back 17

dcpromo

Front 18

What is the name of the Server 2008 answer file?

Back 18

autounattended.xml

Front 19

Tool used to create an unattended answer file

Back 19

Windows System Image Manager, including in Windows AIK

Front 20

What must client workstations have in order to use WDS?

Back 20

A PXE compatible network card

Front 21

Requirements for installing WDS role

Back 21

- Member of AD Domain
- DHCP Server on the network
- NTFS partition available for storing images

Front 22

Two types of images used by WDS

Back 22

Install and Boot

Front 23

WDS Image type that is the OS image being deployed to the device

Back 23

Install image

Front 24

WDS Image type that is used to boot a client prior to the installation of the install image

Back 24

Boot image

Front 25

Two types of WDS boot images

Back 25

Capture and Discover boot image

Front 26

Volume activation key types

Back 26

Multiple Activation Key (MAK)
Key Management Service (KMS)

Front 27

Key type that allows for a specific number of activations

Back 27

MAK

Front 28

MAK activation types

Back 28

MAK Independent - Activates directly to Microsoft
MAK Proxy - Activates through a single server

Front 29

Key type that allows for computers to be activated in a manged environment without requiring connections to Microsoft

Back 29

KMS

Front 30

Number of clients required in order to use KMS

Back 30

25

Front 31

KMS activation must occur at what interval

Back 31

180 days

Front 32

Bits in an IPv4 address

Back 32

32

Front 33

Bits in an IPv6 address

Back 33

128

Front 34

Three types of IPv6 addresses

Back 34

Unicast, Multicast, Anycast

Front 35

What folder on a Windows 2008 installation CD contains images for WDS deployment?

Back 35

/sources

Front 36

IPv6 equivalent of IPv4 public addresses and are globally routable and reachable on the IPv6 section of the Internet

Back 36

Global Unicast Addresses

Front 37

IPv6 equivalent of IPv4 APIPA addresses

Back 37

Link-Local Addresses

Front 38

IPv6 equivalent of IPv4 private address spaces

Back 38

Site-Local Addresses

Front 39

IPv6 unspecified address

Back 39

0:0:0:0:0:0:0:0

Front 40

IPv6 Loopback Address

Back 40

0:0:0:0:0:0:0:1

Front 41

DNS server that is not integrated with AD DS

Back 41

File-backed DNS server

Front 42

Copy of a zone that contains only the resource records necessary to identify the authoritative DNS servers for that zone

Back 42

Stub zone

Front 43

Process one DNS service uses to transfer zone data to another DNS server

Back 43

Full zone transfer

Front 44

Enables a secondary DNS server to pull only those changes that it needs to synchronize its copy of the zone with its source zone

Back 44

Incremental zone transfer

Front 45

A DNS server to which other DNS servers forward requests

Back 45

Forwarders

Front 46

Command line tool for administering DNS

Back 46

dnscmd

Front 47

Command to clear DNS cache

Back 47

ipconfig /flushdns

Front 48

Command to register client with DNS

Back 48

ipconfig /registerdns

Front 49

Command to perform a zone transfer

Back 49

nslookup ls -d domain.name

Front 50

Domain controller that contains a read-only version of the active directory partition

Back 50

Read-Only Domain Controller (RODC)

Front 51

Minimum forest functional level for installing an RODC

Back 51

Windows Server 2003

Front 52

An RODC only allows password storage for users configured in what policy?

Back 52

Password Replication Policy

Front 53

Methods of creating a PSO

Back 53

Using LDIFDE or ADSI Edit

Front 54

The password settings container stores these

Back 54

Password Settings Objects (PSO)

Front 55

A global security group logically mapped to an OU

Back 55

Shadow Group

Front 56

In order to work properly, fine-grained password policies require this domain functional level

Back 56

Windows Server 2008

Front 57

You can only apply fine grained password policies to these

Back 57

User objects and global security groups

Front 58

If you have assigned a PSO to a global security group, but one user in that group requires special settings, what can you assign to that user?

Back 58

Exceptional PSO

Front 59

What users can access the security event log?

Back 59

Domain Admins, Builtin\Administrators, Enterprise Admins

Front 60

Three Windows Server 2008 DS audit settings

Back 60

DS Access, DS Changes (old and new values), DS Replication

Front 61

Available domain functional levels in Server 2008

Back 61

2000 Native, Server 2003, Server 2008

Front 62

Allows every domain in one forest to trust every domain in a second forest

Back 62

Forest-Level Trust

Front 63

Three types of forest-level trust

Back 63

One-way incoming, One-way outgoing, Two-way

Front 64

Trust type used to link two child domains in complex setups

Back 64

Shortcut Trust

Front 65

Trust type used between a domain in your forest and a domain not belinging to a forest (typically WindowsNT4)

Back 65

External Trust

Front 66

Trust between a Unix realm using Kerberos and a Windows Domain

Back 66

Realm Trust

Front 67

Tool used to create trusts

Back 67

Active Directory Domains and Trusts

Front 68

Allows organizations to allow limited access to their infrastructure to trusted partners, acting like a cross-forest trust over the Internet.

Back 68

AD Federation Services (ADFS)

Front 69

ADM files are replaced in Server 2008 by what file type?

Back 69

ADMX

Front 70

Two phases of group policy processing on the client

Back 70

Core Processing and Client-side Extension Processing

Front 71

Baseline templates that can be used when you create new GPOs

Back 71

Starter GPO

Front 72

Default Starter GPO Path

Back 72

C:\Windows\SYSVOL\domain\StarterGPOs

Front 73

Language specific ADMX file equivalent

Back 73

ADML

Front 74

ADMX Domain Central Store Location

Back 74

C:\Windows\SYSVOL\domain\policies\PolicyDefinitions

Front 75

Tool that verifies all policy settings in effect for a specific user or computer

Back 75

GPResult.exe

Front 76

Resource kit utility that checks GPOs for consistency on each DC in your domain

Back 76

GPOTool.exe

Front 77

What does the application server role include?

Back 77

Installation wizard, Core runtime, .NET Framework, Web Services

Front 78

What version of IIS is installed with the Web Server option of the Application Server role?

Back 78

IIS7

Front 79

Makes it possible for multiple applications to use a single TCP port for incoming communications

Back 79

Net.TCP Port Sharing

Front 80

Consist of one or more URLs that are served by a worker process or set of worker processes

Back 80

Application Pool

Front 81

What are application pools used for?

Back 81

Separation of applications.

Front 82

Two modes application pools can operate in with IIS7

Back 82

Integrated Mode and Classic Mode

Front 83

Location for central management of accessibility options

Back 83

Ease of Access Center

Front 84

If an installed application is corrupted or deleted, it is automatically reinstalled

Back 84

Application Resilience

Front 85

Encoded representation of a specific product component and feature found in the registry

Back 85

Darwin Descriptor

Front 86

Lets you deploy MS product updates to computers running Server 2008 and to client operating systems on your network

Back 86

WSUS 3.0

Front 87

Provides a single software solution with a single console for managing your servers, clients, hardware, software, and IT services for a more unified experience.

Back 87

System Center Essentials 2007

Front 88

Designed for larger environments and enables you to deploy server and client operating systems, applications, and updates.

Back 88

System Center Configuration Manager 2007

Front 89

Systems management software limited to 30 servers or 500 clients

Back 89

System Center Essentials 2007

Front 90

Clients connecting to a terminal server require this

Back 90

TS CAL

Front 91

Possible TS Licensing discovery scopes

Back 91

Workgroup, Domain, Forest

Front 92

Two types of TS CALs

Back 92

Per Device, Per User

Front 93

What must be backed up in order to backup a TS Licensing server?

Back 93

The System State and the folder where the TS Licensing DB is installed

Front 94

Type of TS CAL that can be revoked

Back 94

Per-Device CAL

Front 95

Service that simplifies the process of adding capacity, allowing the load balancing of Terminal Servers in a group and the reconnection of clients to existing sessions within that group.

Back 95

TS Session Broker

Front 96

TS Session Broker can work with what two other features?

Back 96

DNS Round Robin or Network Load Balancing

Front 97

In order to add a computer to a TS Farm you must add that computer to what group?

Back 97

The Session Directory Computers local group on the TS Session Broker host.

Front 98

Two tools that can be used to manage and monitor TS resources

Back 98

System Monitor and Windows System Resource Manager

Front 99

Installable feature that controls how resources are allocated

Back 99

Windows System Resource Manager

Front 100

WSRM policies applicable to Terminal Services

Back 100

Equal_Per_User and Equal_Per_Session

Front 101

Allows Internet clients secure, encrypted access to Terminal Servers behind your organizations firewall without having to deploy a VPN

Back 101

TS Gateway

Front 102

TS Gateway uses these protocols

Back 102

RDP over HTTPS

Front 103

Performs a client health check to determine if access should be allowed or disallowed

Back 103

NAP

Front 104

Number of virtual instance licenses included with Server 2008 Enterprise

Back 104

4

Front 105

Number of virtual instance licenses included with Server 2008 Datacenter

Back 105

Unlimited

Front 106

Tools that can be used to virtualize existing physical machines

Back 106

VSMT and SCVMM

Front 107

Point in time backup of a VM

Back 107

Snapshot

Front 108

Special virtualized space used by Microsoft Application Virtualization

Back 108

Silo

Front 109

Allows Terminal Server applications to be presented straight to a client desktop without requiring that a normal TS session be established

Back 109

RemoteApp

Front 110

Allows applications to be virtualized

Back 110

Microsoft Application Virtualization