Lead2pass.Microsoft v Q

Transcription

1 Lead2pass.Microsoft v Q Number: Passing Score: 800 Time Limit: 120 min File Version: ht t p:/ / w w w.gratisexam.com/ Vendor: Microsoft Exam Code: Exam Name: TS: Forefront Protection for Endpoints and Applications, Configuring Version: 12.49

2 Exam A QUESTION 1 Your network environment has System Center Configuration Manager (SCCM) The SCCM hierarchy is shown in the following table. The MOW site has Forefront Endpoint Protection (FEP) 2010 installed. You plan to install FEP 2010 on the LON site. You need to ensure that existing custom FEP policies will apply in the MOW site after the FEP installation on the LON site is complete. A. Rename the FEP - Policies package. B. Set the highest precedence to the custom policies on the MOW site. C. Distribute the FEP - Policies package from the MOW site before the FEP installation on the LON site is complete. D. Export FEP policies from the MOW site before the FEP installation on the LON site is complete. Import the policies into the LON site. Correct Answer: D QUESTION 2 Your network environment has System Center Configuration Manager (SCCM) 2007 configured as a single site. The network has servers as shown in the following table. You need to install the Forefront Endpoint Protection (FEP) 2010 Server by using the Basic topology. Which role or roles should you install on SQL01? (Choose all that apply.) A. FEP Database B. FEP Reporting C. FEP Security Client D. FEP Reporting Database E. FEP Console Extensions for Configuration Manager F. FEP Site Server Extensions for Configuration Manager BD QUESTION 3 Your network environment has System Center Operations Manager (SCOM) 2007 and the Forefront Endpoint Protection (FEP) 2010 Management Pack. You have a server that has the SCOM agent installed.

3 You need to update antivirus definitions on the server. You also need to verify that the definitions have been updated. A. Use SCOM to run the Antivirus Update task and use the Health Explorer tool. B. Use SCOM to run the Antivirus Update task and view the Application log from the Event Viewer console. C. Run Windows Update and view the Security log from the Event Viewer console. D. Run the gpupdate.exe /force command and view the Application log from the Event Viewer console. QUESTION 4 Your network environment uses Windows Server 2008, System Center Configuration Manager (SCCM) 2007, and Forefront Endpoint Protection (FEP) When a user attempts to update antivirus definitions on a computer that runs Windows XP, she receives an error. You need to identify possible causes of the error. A. View the eppsetup.log file. B. Access the FEP dashboard in SCCM. C. View the computer s Application log in Event Viewer. D. In the Configuration Manager Reporting folder, run the computer status report. Correct Answer: C QUESTION 5 Your network environment has System Center Configuration Manager (SCCM) 2007, System Center Operations Manager (SCOM), and Forefront Endpoint Protection (FEP) You need to ensure that you are notified when an error occurs on the SCCM server that runs FEP. A. Create a new alert rule by using the Configuration Manager console. B. Create and schedule a new report by using the Configuration Manager console. C. Create an Event Viewer Subscription and select the server as the source computer. D. Create a new alert by using the Operations Manager FEP Server Health Monitoring Management Pack. "First Test, First Pass" Correct Answer: D QUESTION 6 Your network environment has System Center Configuration Manager (SCCM) 2007 and Forefront Endpoint Protection (FEP) You need to protect client computers from network-based attacks.

4 ht t p:/ / w w w.gratisexam.com/ A. Install Microsoft Network Monitor. B. From the FEP console, select Enable behavior monitoring. C. From the FEP console, select Enable Network Inspection System. D. Use Windows Firewall to configure Connection Security Rules. Create an Isolation rule. Correct Answer: C /Reference: QUESTION 7 Your network environment has System Center Configuration Manager (SCCM) 2007 and Windows Server Update Services (WSUS). You perform a remote installation of Forefront Endpoint Protection (FEP) 2010 to all client computers. You discover that some of the installations failed. You need to ensure that all client computers have the FEP client installed. A. Use the SCCM console. B. Use the WSUS console. C. Restart the Netlogon service on the client computers. D. Run the gpupdate /force command on the client computers. QUESTION 8 You have recently deployed Forefront Endpoint Protection (FEP) 2010 to all computers in your company network. You are informed of a virus outbreak on a number of computers. You need to identify and remove the viruses from the infected computers. A. Disconnect the infected computers from the network. Launch a distant scan from the Configuration Manager console. B. Select the Network protection against exploits of known vulnerabilities check box on the FEP clients. Run a quick scan on the infected computers. C. Select the Enable Network Inspection system check box on the FEP clients. Launch a distant scan from the Configuration Manager console. D. Access the Infected Computers Collection in the Configuration Manager console. Run an antimalware definition update on all computers in that collection, and then run a full scan. "First Test, First Pass" Correct Answer: D

5 QUESTION 9 Your network environment has Forefront Protection for Exchange Server (FPE) and Forefront Endpoint Protection (FEP) You discover that several messages are quarantined. The messages do not contain malware (malicious software). You release the messages from quarantine but they are quarantined again within five minutes. You need to prevent these messages from being quarantined again. A. From the FPE console, select Clear Transport Statistics. B. From the FPE console, cancel the selection of the Rescan filters onsend option. C. From the FPE console, select Automatically purge incidents. Change the Purge after (days) setting to 1. D. From the FEP console, create a new repeated malware detection alert. Set the Number of malware detections option to 4 and the Malware detection interval option to 4 hours. QUESTION 10 You deploy a Microsoft Office SharePoint Server 2010 website. You install and configure Forefront Protection 2010 for SharePoint (FPSP) to quarantine infected files that are uploaded. You need to notify users when a document uploaded by them is quarantined. A. Configure a critical error event notification. B. Configure a virus found incident notification. C. Configure a file filter matched incident notification. D. Configure the KEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Notifications\ registry key. QUESTION 11 our network environment has System Center Configuration Manager (SCCM) All computers in the network have the Forefront Endpoint Protection (FEP) 2010 client installed and configured through FEP policies. You create a new FEP policy. You need to assign the policy only to a selected computer. What should you do in the SCCM console? A. Create a new package. B. Create a new collection. C. Create a new advertisement. D. Set the precedence for the policy.

6 /Reference: "First Test, First Pass" QUESTION 12 Your network environment has System Center Configuration Manager (SCCM) All computers have the Forefront Endpoint Protection (FEP) 2010 client installed. You need to apply the settings from two existing FEP policies only to selected computers. A. Create a collection and add the selected computers to the new collection. Assign both existing FEP policies to the new collection. B. Export the existing FEP policies into a single FEP policy file. Import the file as a new FEP policy. C. Copy the existing FEP policies as new FEP policies. Place the selected computers in two collections. Assign the first new FEP policy to one collection and the other new policy to the second collection. D. Export the existing FEP policies into FEP policy files. Use the FEP Group Policy Tool to merge the files into a Group Policy Object (GPO). Export the GPO settings into a FEP policy file. Import the file as a new FEP policy. Correct Answer: D QUESTION 13 Your network environment has System Center Configuration Manager (SCCM) 2007 and Window Server Update Services (WSUS). All computers have Forefront Endpoint Protection (FEP) 2010 installed and configured through FEP policies as shown in the exhibit. You need to ensure that new definition updates are available for distribution. A. Approve the definition updates in the WSUS administration console. B. Set the Check for definition updates using the following interval: option to 1 hour. C. Create a new distribution template in the Configuration Manager administration console. D. Move the Updates distributed from Configuration Manager or WSUS option to the top of the list. QUESTION 14 You deploy a Microsoft Office SharePoint Server 2010 portal to your company network. You install Forefront Protection for SharePoint (FPSP) You need to prevent users from uploading MP3 files to the portal. A. Configure a new filter list and specify a file filter. B. Configure a new filter list and specify a keyword filter. C. Configure real-time filtering options in the filter options menu. D. Configure scan options in the global settings advanced options pane.

7 QUESTION 15 Your company network environment has Microsoft Office SharePoint Server 2010 and Forefront Protection 2010 for SharePoint (FPSP). You need to ensure that all documents uploaded or downloaded through the portal are scanned. A. Use the FPSP console. B. Use the SharePoint portal. C. Use the Forefront Management Shell. D. Use the SharePoint central administration website. "First Test, First Pass" Correct Answer: D QUESTION 16 You deploy a Microsoft Office Sharepoint Server 2010 portal to your company network. You install Forefront Protection for Sharepoint (FPSP) You discover that the performance of the server is affected after the FPSP install. You need to ensure that FPSP does not affect the server performance. A. Disable real-time scanning for any non-critical engines. B. Disable the scheduled scanning for any non-critical engines. C. Edit the antimalware engines by disabling the Check for updates D. Select the Update engines on server startup check box in the Engine options menu. QUESTION 17 Your company network includes Microsoft Exchange Server 2007 and Forefront Protection for Exchange Server (FPE) 2010 in a Windows Server 2008 environment. You discover unknown malware (malicious software) that has infected some mailboxes. You view the FPE console. You do not see a notification regarding the malware infection. You need to immediately scan specific mailboxes. Which type of scan should you run? A. On-Demand B. Realtime C. Scheduled D. Transport

8 QUESTION 18 Your company network includes Microsoft Exchange Server 2007 and Forefront Protection for Exchange (FPE) 2010 in a Windows Server 2008 environment. You use the FPE console to monitor all antivirus and antimalware engines. You detect that a spam attack has occurred. You analyze the following messages: "First Test, First Pass" You need to create a filter that will prevent the occurrence of this type of in the future. Which type of filter should you use? A. file B. keyword C. subject line D. sender-domain Correct Answer: C QUESTION 19 Your company network includes Microsoft Exchange Server 2007 and Forefront Protection for Exchange

9 Server (FPE) 2010 in a Windows Server 2008 environment. You use the FPE console to monitor all antivirus and antimalware (anti-malicious software) engines. You detect that a spam attack has occurred. You need to create a filter that identifies words repeated in the body of messages. Which type of filter should you use? A. file B. keyword C. subject line "First Test, First Pass" D. sender-domain QUESTION 20 Your network environment includes Microsoft Exchange Server You detect that a spam attack has occurred. You need to prevent further spread of messages based on IP addresses repeated in headers. Which type of filter should you use? A. file B. keyword C. connection D. sender-domain Correct Answer: C /Reference: QUESTION 21 Your company network is configured according to the following table. All Exchange servers run Forefront Protection for Exchange Server (FPE). You need to ensure that all s are scanned for viruses even if they have been scanned by another instance of FPE. (Choose all that apply.) A. Enable the Scan with all engines option in FPE on each Exchange server. B. Enable the Scan with a dynamically chosen subset of engines option in FPE on each Exchange C. Cancel the selection of the Optimize for performance by not rescanning messages already virus scanned option in FPE on Server1. D. Cancel the selection of the Optimize for performance by not rescanning messages already virus scanned option in FPE on Server2. Correct Answer: CD

10 QUESTION 22 Your network environment uses Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE) "First Test, First Pass" The Edge Transport role is installed on a separate server named EdgeServer1. You want to install an additional Edge Transport server named EdgeServer2. You need to use the existing FPE configuration settings of EdgeServer1 on EdgeServer2. Which command or commands should you use? (Choose all that apply.) A. Set- FseExtendedOption -name * B. New- FseExtendedOption -name * C. Export- FseSettings -path path\edgeserver1.xml D. Import- FseSettings -path path\edgeserver1.xml E. Import- FseSettings -path path\edgeserver1.txt F. Get- FseExtendedOption -name * > > path\edgeserver1.txt Correct Answer: CD QUESTION 23 Your network environment has a single System Center Configuration Manager (SCCM) site. All computers in the network run Forefront Endpoint Protection (FEP) SCCM collects configuration baseline statistics for the FEP High-Security Desktop baseline once a week. You want to update the baseline statistics in the FEP dashboard once a day. You need to configure SCCM to collect the baseline statistics every day. A. Modify the FEP High-Security Desktop baseline collection assignment properties. B. Create a new configuration baseline category. Assign the FEP High-Security Desktop baseline to the new category. C. Duplicate the FEP High-Security Desktop baseline. Modify the rules in the new baseline. D. Duplicate the FEP High-Security Desktop baseline. Create a new configuration baseline item of the General type. QUESTION 24 Your network environment has servers that have System Center Configuration Manager (SCCM) 2007, System Center Operations Manager (SCOM), and Forefront Endpoint Protection (FEP) 2010 installed. You discover that five computers have outdated definition files. You need to use SCOM to force definition updates on the computers. (Each correct answer presents part of the solution. Choose all that apply.) A. From the SCOM console, run the Update Security Definitions task.

11 B. From the SCOM console, run the Update Antimalware Definitions task. C. Import the FEP Security Management Pack. D. Import the FEP Server Health Monitoring Management Pack. C QUESTION 25 Your network environment has Active Directory Domain Services and Forefront Endpoint Protection (FEP) You plan to add a new client computer to the network. You need to install the following components to the client computer before joining the computer to the network: FEP 2010 client software A FEP policy named FEP_newpolicy.xml A. From a PowerShell console, run Import-FSESettings path C:\fepspolicy\FEP_newpolicy.xml. B. From a command prompt, run FEPInstall.exe /policy c:\fepspolicy\fep_newpolicy.xml. C. From a command prompt, run ServerSetup.exe /policy c:\fepspolicy\fep_newpolicy.xml. D. Use the Fepserverrolepoliciesforusewithgpo.exe tool to import the FEP_newpolicy.xml policy "First Test, First Pass" settings to a Group Policy Object (GPO). Link the GPO to the organizational unit that contains the client computer object. QUESTION 26 You use System Center Configuration Manager (SCCM) 2007 to deploy the Forefront Endpoint Protection (FEP) 2010 client on a collection of Windows 7 computers that are used in branch offices. Users at the branch offices have local administrator rights. You need to ensure that if the FEP client is uninstalled, the amount of time that the computer runs without FEP protection is reduced. A. Configure the advertisement to Always Rerun. B. Configure the advertisement to Rerun if failed previous attempt. C. Configure the priority of the advertisement from Low to High. D. Enable the Allow users to run the program independently of assignment check box. QUESTION 27 You install the Forefront Endpoint Protection (FEP) 2010 client on a Windows Server 2008 computer. After the installation, FEP fails to start and you receive an unknown error. You need to find out the cause of the installation error.

12 A. View the EppSetup.log file. B. View the Windows Security log in Event Viewer. C. View the computer s status history in the FEP client console. D. View the MSSecurityClient_Setup_mp_ambits_install.log file. QUESTION 28 Your network environment has servers that have System Center Configuration Manager (SCCM) 2007, System Center Operations Manager (SCOM) 2007, Windows Server Update Services (WSUS), and Forefront Endpoint Protection (FEP) 2010 installed. You need to receive notifications by if a malware (malicious software) is detected on more than 100 computers within a 24-hour period. Which type of alert should you configure? A. malware detection B. malware outbreak C. multiple malware detection D. repeated malware detection "First Test, First Pass" QUESTION 29 Your network environment has System Center Configuration Manager (SCCM) 2007 and Forefront Endpoint Protection (FEP) You use System Center Operations Manager (SCOM) 2007 to monitor malware (malicious software) in real time. You need to receive alerts and notifications for any violation of policy. A. Install the FEP Security Management Pack for SCOM. Configure a notification in SCOM. B. Install the FEP Server Health Monitoring Management Pack for SCOM. Configure a notification in SCOM. C. Install the FEP Security Management Pack for SCOM. Create a collection of out-of-compliance computers. Use a script to re-enable real-time protection. D. Create a Desired Configuration Management (DCM) baseline. Create a collection of out-of-compliance computers. Use a script to re-enable real-time protection. QUESTION 30 Your network environment has System Center Operations Manager (SCOM) 2007 and Forefront Endpoint Protection (FEP) You plan to take a client computer offline. You need to ensure that this action does not generate alerts.

13 A. From the FEP console, turn off real-time protection. B. From the FEP console, exclude the FepSrv.exe process. C. From the FEP console, exclude the MsMpEng.exe process. D. From the SCOM console, place the client computer in maintenance mode. E. From the SCOM console, create an override for the Additional Actions Pending monitor. Correct Answer: D QUESTION 31 Your network environment has System Center Configuration Manager (SCCM) 2007, System Center Operations Manager (SCOM) and Forefront Endpoint Protection (FEP) You install the FEP Management Pack. You need to receive notifications of failed FEP client installations as soon as they occur. A. Create a status filter query. B. Create a subscription for the Client Deployment monitor. C. Create a subscription for the Antimalware Engine monitor. D. Create a custom Desired Configuration Management (DCM) baseline. "First Test, First Pass" QUESTION 32 Your network environment has System Center Configuration Manager 2007 (SCCM), Microsoft Exchange Server 2010, Forefront Protection for Exchange Server (FPE), and Forefront Endpoint Protection (FEP) Recently, the IP address of the Exchange server was changed. You need to ensure that you can receive FEP alerts by . A. From the FPE console, configure the Incident notifications type. B. From the FPE console, select Use Reverse DNS Lookup when determining whether a message is inbound. C. From the SCCM console, modify the SMTP Server address for FEP alerts. D. On the SCCM server, modify the SMTP Server address in Internet Information Services (IIS). Correct Answer: C QUESTION 33 Your network environment has a single System Center Configuration Manager (SCCM) site. All computers in the network run Forefront Endpoint Protection (FEP) SCCM collects configuration baseline statistics for the FEP High-Security Desktop baseline once a week. You want to update the baseline statistics in the FEP dashboard once a day. You need to configure SCCM to collect the baseline statistics every day.

14 A. Modify the FEP High-Security Desktop baseline collection assignment properties. B. Create a new configuration baseline category. Assign the FEP High-Security Desktop baseline to the new category. C. Duplicate the FEP High-Security Desktop baseline. Modify the rules in the new baseline. D. Duplicate the FEP High-Security Desktop baseline. Create a new configuration baseline item of the General type. QUESTION 34 Your network environment has Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE) You need to ensure that messages accessed from the Information Store are scanned for the maximum amount of malware (malicious software) possible. Which real-time scan setting in FPE should you configure on the Mailbox server? A. Enable the Scan after engine update setting. B. Enable the Scan message body setting. C. Change the value in the Process count setting to 10. D. Increase the value in the Scanning timeout (seconds) setting to 600. "First Test, First Pass" QUESTION 35 Your network environment has System Center Configuration Manager (SCCM) SCCM is "First Test, First Pass" deployed as shown in the following table. You plan to deploy Forefront Endpoint Protection (FEP) You need to meet the following requirements: Branch office administrators must be able to modify FEP settings independently of one another. Main office administrators must not be able to modify FEP settings. Main office administrators must receive FEP reports from branch offices. (Choose all that apply.) A. Install FEP 2010 in the LON office. B. Install FEP 2010 in the CHI office. C. Install FEP 2010 in the MOW office.

15 D. Install the FEP 2010 Reporting role in the CHI office. E. Install the FEP 2010 Reporting role in the LON office. F. Install the FEP 2010 Reporting role in the MOW office. CE /Reference: ht t p:/ / w w w.gratisexam.com/ QUESTION 36 Your company network is configured according to the following table. All Exchange servers run Forefront Protection for Exchange Server (FPE). You need to ensure that all s are scanned for viruses even if they have been scanned by another instance of FPE. (Choose all that apply.) A. Enable the Scan with all engines option in FPE on each Exchange server. B. Enable the Scan with a dynamically chosen subset of engines option in FPE on each Exchange C. Cancel the selection of the Optimize for performance by not rescanning messages already virus scanned option in FPE on Server1. D. Cancel the selection of the Optimize for performance by not rescanning messages already virus scanned option in FPE on Server2. Correct Answer: CD QUESTION 37 Your network environment uses Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE) "First Test, First Pass" The Edge Transport role is installed on a separate server named EdgeServer1. You want to install an additional Edge Transport server named EdgeServer2. You need to use the existing FPE configuration settings of EdgeServer1 on EdgeServer2. Which command or commands should you use? (Choose all that apply.) A. Set- FseExtendedOption -name * B. New- FseExtendedOption -name *

16 C. Export- FseSettings -path path\edgeserver1.xml D. Import- FseSettings -path path\edgeserver1.xml E. Import- FseSettings -path path\edgeserver1.txt F. Get- FseExtendedOption -name * > > path\edgeserver1.txt Correct Answer: CD QUESTION 38 Your network environment has Windows Server 2008 R2 that has the Hyper-V role installed. Physical disk space is limited. You plan to deploy Microsoft Office SharePoint Server 2010 and Forefront Protection 2010 for SharePoint (FPSP) to a virtual machine. You need to ensure that FPSP remains operational. A. Configure the.vhd file as a fixed-size virtual hard disk. B. Configure the.vhd file as a dynamically expanding virtual hard disk. C. Configure snapshots that must be taken at regular intervals. D. Configure file-level antivirus scanning for all SharePoint and FPSP directories. QUESTION 39 Your network environment has servers that have System Center Configuration Manager (SCCM) 2007, System Center Operations Manager (SCOM) 2007, and Forefront Endpoint Protection (FEP) 2010 installed. You want to test a change to the real-time scanning protection configuration of all client computers that have FEP 2010 deployed. You need to create and apply a new FEP policy to 10 pilot client computers. (Each correct answer presents part of the solution. Choose all that apply.) A. Use Active Directory to create a new security group and add the 10 pilot computers to this group. B. Use SCCM to create a new FEP policy and assign the new policy to the new collection. C. Use SCCM to create a new FEP policy and assign the new policy to the new Active Directory group. D. Use SCOM to create a new FEP policy and assign the new policy to the new Active Directory group. E. Use SCCM to create a new Computer Management collection and add the 10 pilot computers to the collection. E /Reference: "First Test, First Pass" QUESTION 40 Your network environment includes System Center Configuration Manager (SCCM) 2007, System Center Operations Manager (SCOM) 2007, and Forefront Endpoint Protection (FEP) 2010 installed in a Windows Server 2008 environment. You import FEP Security Management Pack to SCOM You need to monitor endpoints that run client operating systems.

17 What should you do from the SCOM authoring view? A. Update the views of the security management pack to display all objects of the Windows Client class. B. Update the rules of the security management pack to monitor for all objects of the Windows Client class. C. Update the monitors of the security management pack to monitor for all objects of the Windows Client class. D. Enable Overrides the Object Discovery of the Protected Client Candidate Discovery,For all objects of class: Windows Client option. Correct Answer: D QUESTION 41 Your network environment has System Center Configuration Manager (SCCM) Forefront Endpoint Protection (FEP) 2010 is deployed to all computers. You create a new FEP Desired Configuration Management (DCM) configuration baseline. You need to add the new baseline to the FEP dashboard. A. Assign the new baseline to a collection. B. Assign the new baseline to the FEP category. "First Test, First Pass" C. Assign Read permission to the new baseline item for the Domain Users group. D. Configure the configuration baseline rules within the new baseline QUESTION 42 Your network environment has Microsoft Exchange Server 2010, System Center Configuration Manager (SCCM) 2007, and Forefront Endpoint Protection (FEP) You need to be able to deploy a preconfigured FEP policy template to an Exchange server. A. Import the FEP_Exchange.xml file by using the FEP 2010 Group Policy Tool. B. Extract the FEPServerRolePoliciesForUseWithGPO.exe file to the %program files%\microsoft Forefront Security\Exchange Server\Data folder. C. Extract the FEPServerRolePoliciesForUseWithGPO.exe file to the %program files%\microsoft Forefront "First Test, First Pass" Security\Policytemplates folder. D. Extract the FEPServerRolePoliciesForUseWithConfigMgrUI.exe file to the %program files%\microsoft ForeFront Security\Policytemplates folder. Correct Answer: C QUESTION 43 Your network environment has System Center Configuration Manager (SCCM) 2007.

18 All computers in the network have the Forefront Endpoint Protection (FEP) 2010 client installed and configured through FEP policies. You have several users whose client computers run 64-bit versions of Windows 7. The computers are not always connected to the network. You need to install the most recent virus and spyware definition file on the computers. Which file should you use? A. Mpas-fe.exe B. Mpam-fe.exe C. Mpas-fex64.exe D. pam-fex64.exe Correct Answer: D QUESTION 44 Your network environment has Microsoft Exchange Server 2007 and Forefront Endpoint Protection (FEP) 2010 in a Windows Server 2008 environment. You need to manually deploy a preconfigured security policy for Exchange Server 2010 by using a script. Which file should you use? (Each correct answer presents a complete solution. Choose all that apply.) A. FEP_Exchange.xml B. FEP_Exchange_FPE.xml C. FEP_Default_Exchange.xml D. FEP_Default_Exchange_FPE.xml B QUESTION 45 Your network environment has a System Center Configuration Manager (SCCM) You have a Windows Server 2008 server that provides access to a server-based application. All client computers run Forefront Endpoint Protection (FEP) You install FEP on the server. All users report that the application is no longer available. You need to ensure that client computers can run the application. "First Test, First Pass" A. From the SCCM console, enable Windows Firewall for the server. B. From the FEP console on the server, create an entry in the Excluded files and locations option. C. From the FEP console on client computers, cancel the selection of the Scan all downloads option. D. From the FEP console on client computers, cancel the selection of the Enable Network Inspection option. E. From the FEP console on client computers, create an entry in the Excluded files and locations option.

19 QUESTION 46 Your network environment has Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE). s sent to and received from the Internet are delivered by Exchange 2010 Edge Transport servers. End users report that they receive Delivery Status Notifications (DSN) messages from s they did not send. The DSN messages state that the s were undeliverable. You need to ensure that only valid DSN messages are delivered to end users from messages that they send. Which type of filter should you use on the Edge Transport servers? A. Backscatter B. Connection C. Recipient D. Sender QUESTION 47 Your company network includes Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE) 2010 in a Windows Server 2008 environment. You need to enable spam filtering in FPE by using the Forefront Management Shell. Which Forefront Management Shell cmdlet should you use? A. Set-FseFilterList B. Set-FseSpamFiltering C. Set-FseSpamContentFilter D. Set-FseSpamConnectionFilter QUESTION 48 Your company network includes Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE) 2010 in a Windows Server 2008 environment. You need to prevent s that contain certain phrases from being sent or received. "First Test, First Pass" A. Configure a new filter list and specify a file filter. B. Configure a new filter list and specify a keyword filter. C. Configure a new filter list and specify a subject line filter. D. In the Forefront Management Shell, use the Get-FseOnDemandFilter command.

20 QUESTION 49 Your network environment includes Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE) You need to ensure that incoming files infected with malware (malicious software) are removed as soon as they are received. How should you configure Antimalware scan in Hub Transport? A. Change the Virus and Spyware Scan Actions to Clean. B. Change the Virus and Spyware Scan Actions to Delete. C. Change the Illegal MIME header action to Purge. D. Run Set-FseTransportFilter -enabled. QUESTION 50 Your network environment uses Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE) You need to immediately apply new definitions for Exchange Server 2010 in FPE. Which PowerShell cmdlet should you use? A. Start-FseScheduledScan B. Start-FseOnDemandScan C. Start-FseSignatureUpdate D. Set-FseSpamConnectionFilter Correct Answer: C QUESTION 51 Your network environment has System Center Configuration Manager (SCCM) 2007 and Forefront Endpoint Protection (FEP) Your SCCM site is configured as shown in the exhibit. The Exchange Server 2010 Policy is applied to the All Exchange Servers collection. The All Member Servers Policy is applied to the All Member Server Computers collection. A server named MADRID is a member of both collections. A weekly backup of the All Member Servers Policy is taken. You discover that the All Member Servers Policy is not present. You import a backup of the policy and apply it to the All Member Servers collection. The MADRID server no longer has the correct FEP policy settings applied. You need to restore the correct FEP policy settings for MADRID. "First Test, First Pass" A. Lower the policy precedence on the All Member Servers Policy. B. Copy the policy and give it a new name. Apply the policy to the collection. C. Create a new collection for the MADRID server. Apply the All Member Servers Policy to the collection. D. Export the All Member Servers Policy. Import the policy and apply it to the All Member Server Computers collection.

21 QUESTION 52 Your network environment has System Center Configuration Manager (SCCM) 2007 and Forefront Endpoint Protection (FEP) Your SCCM site is configured as shown in the exhibit. The Exchange Server 2010 Policy is applied to the All Exchange Servers collection. The All Member Servers Policy is applied to the All Member Server Computers collection. A server named MADRID is a member of both collections. A weekly backup of the All Member Servers Policy is taken. You discover that the All Member Servers Policy is not present. You import a backup of the policy and apply it to the All Member Servers collection. The MADRID server no longer has the correct FEP policy settings applied. You need to restore the correct FEP policy settings for MADRID. "First Test, First Pass" A. Lower the policy precedence on the All Member Servers Policy. B. Copy the policy and give it a new name. Apply the policy to the collection. C. Create a new collection for the MADRID server. Apply the All Member Servers Policy to the collection. D. Export the All Member Servers Policy. Import the policy and apply it to the All Member Server Computers collection. QUESTION 53 Your network environment has an Active Directory domain that runs in the Windows Server 2008 R2 functional level. All computers have the Forefront Endpoint Protection (FEP) 2010 client. You open a Remote Desktop connection to a domain controller and create a new Group Policy Object (GPO) named FEP_2010_Configuration_for_Desktops. You are unable to locate FEP 2010 settings in the Group Policy Management Editor (GPME) console. You need to configure FEP 2010 settings by using the GPME tool that runs on one of the domain controllers. A. Copy the fep2010.admx and fep2010.adml files from the FEP installation media to the %Systemroot% \PolicyDefinitions folder on the domain controller. B. Copy the %Systemroot%\PolicyDefinitions folder from the domain controller to the Group Policy Central Store. Force replication between domain controllers. C. Import existing FEP policy settings into the FEP_2010_Client_Configuration GPO. D. Merge existing FEP policy settings into the FEP_2010_Client_Configuration GPO. Correct Answer: C /Reference:

22 QUESTION 54 The computers in your company network are members of an Active Directory domain. Domain controller accounts are stored in the built-in container named Domain Controllers. All other server accounts are stored in a top-level organizational unit (OU) named Servers. You create two unlinked Group Policy Objects (GPOs) named FEP_Default_Server and FEP_DC. You import the preconfigured FEP policy templates named FEP_Default_Server.xml and FEP_DC.xml into FEP_Default_Server and FEP_DC, respectively. You need to perform the following tasks: Assign settings from the FEP_Default_Server GPO to all servers. Assign additional settings from the FEP_DC GPO only to the domain controllers. A. Link the FEP_DC GPO to the Domain Controllers OU. Link the FEP_Default_Server GPO to the B. Link the FEP_DC GPO to the domain. Link the FEP_Default_Server GPO to the Servers OU. C. Link both GPOs to the Servers OU. Set the higher priority for the FEP_DC GPO. D. Link both GPOs to the Servers OU. Set the higher priority for the FEP_Default_Server GPO. /Reference: "First Test, First Pass" QUESTION 55 The Active Directory domain of your company runs in the Windows Server 2008 functional level. All computers in the IT department are members of the domain and run Windows 7. You need to be able to configure Forefront Endpoint Protection (FEP) 2010 Group Policy settings from any computer in the IT department by using the Group Policy Management Editor (GPME) tool. You install Remote Server Administration Tools (RSAT) on the computers in the IT department. What should you do next? A. Configure all domain controllers to allow Remote Desktop connections for your domain account. B. Copy FEP 2010 Group Policy administrative templates to the Group Policy Central Store. C. Copy FEP 2010 Group Policy templates to the %Systemroot%\PolicyDefinitions folder on all domain controllers. D. Copy FEP 2010 preconfigured policy templates to the %Systemroot%\PolicyDefinitions folder on all domain controllers. QUESTION 56 All computers in your company network are members of an Active Directory domain. Client computer accounts are stored in an organizational unit (OU) named Desktops. User accounts are stored in an OU named Users Accounts. Both OUs are located in the root of the domain. You create the following two unlinked Group Policy Objects (GPOs) named FEP_Scan_Settings and FEP_Client_Interface_Settings: The FEP_Scan_Settings GPO configures scan policies in the Forefront Endpoint Protection 2010 \ Scan section of the GPO. The FEP_Client_Interface_Settings GPO configures notification policies in the Forefront Endpoint Protection 2010\Client Interface section of the GPO. You need to apply the scan policies to client computer accounts.

23 You also need to apply the notification policies to the regular users when users log on to client computers. A. Link both GPOs to the Desktops OU. B. Link both GPOs to the Users Accounts OU. C. Link the FEP_Client_Interface_Settings GPO to the Users Accounts OU. Link the FEP_Scan_Settings D. GPO to the Desktops OU. E. Link the FEP_Scan_Settings GPO to the Users Accounts OU. Link the FEP_Client_Interface_Settings GPO to the Desktops OU. QUESTION 57 All computers in your company network are members of an Active Directory domain. The domain member servers receive a Forefront Endpoint Protection (FEP) policy from a Group Policy Object (GPO) linked to the domain. The GPO is filtered by a security group. "First Test, First Pass" You install a new member server that runs Windows Server You add the server computer account to the security group. You discover that the new server is unable to receive the FEP policy from the domain. You need to apply the FEP policy to the server. A. Restart the server. B. Log off and log on to the server. C. Run the gpupdate.exe /target:computer /force command on the server. D. Copy the fep2010.admx and fep2010.adml files from the FEP installation media to the %Systemroot% \PolicyDefinitions folder on the server. QUESTION 58 Your network environment has System Center Configuration Manager (SCCM) All computers in the network are members of a single Active Directory domain and have the Forefront Protection Manager (FEP) 2010 client installed. All FEP clients are managed by FEP policies defined in SCCM. The existing FEP policies configure definition updates settings for desktops and servers. You need to apply the same definition updates settings to all computers. You also need to ensure that all other settings assigned to the desktops and servers by the FEP policies remain unchanged. A. Create a new Group Policy Object (GPO) linked to the domain. Enable the definition updates policy in the GPO. B. Create a new FEP policy assigned to the Deployment Succeeded collection. Enable the definition updates settings in the policy. C. Create a new FEP policy template along with the required definition updates settings. Import a new FEP policy based on the template. D. Configure the required definition updates settings in one of the existing FEP policies. Set the highest precedence to the policy.

24 QUESTION 59 Your network environment has Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE) You need to ensure that messages accessed from the Information Store are scanned for the maximum amount of malware (malicious software) possible. Which real-time scan setting in FPE should you configure on the Mailbox server? A. Enable the Scan after engine update setting. B. Enable the Scan message body setting. C. Change the value in the Process count setting to 10. D. Increase the value in the Scanning timeout (seconds) setting to 600. "First Test, First Pass" QUESTION 60 Your network environment has Microsoft Exchange Server 2010 and Forefront Protection for Exchange Server (FPE) The network configuration is shown in the following table. You need to ensure that all s sent from inside your domain to recipients within your domain are scanned for malware (malicious software). A. Configure Internal scanning on the Mailbox server. B. Configure Internal scanning on the Hub Transport server. C. Configure Inbound scanning on the Hub Transport server. D. Configure Inbound scanning on the Edge Transport server. /Reference: ht t p:/ / w w w.gratisexam.com/