Final: Chapter: Chapters 1-22

Transcription

1 Final: Chapter: Chapters 1-22 Study online at quizlet.com/_u1t2v 1.? AND * To copy, replace, update, or delete files, you can use wildcard characters. Which wildcard characters can you use? Select all that apply. 2..ini files Which Windows extension allows you to add, replace, or delete sections or properties in configuration settings or setup information files? 3..msi What is the filename extension for the files in which installation information is stored? 4..net Which of the following is an example of a top-level domain? 5. 0 What setting can you give for account lockout duration that requires an administrator to manually unlock the account? 6. 0 to 24 What is the range of password history settings? 7. 5 minutes What is the default maximum allowable time lapse between domain controllers and client systems for Kerberos to work correctly? 8. 5,000 The default namespace mode is Windows Server 2008, which supports up to 50,000 folders. How many folders does using non-windows Server 2008 provide? 9. 7 What is the default minimum password length in characters? What is the default setting for password history? Which TCP/UDP port does the DNS service use to communicate? Before Windows 2008 R2, only nine basic audit settings existed. Windows Server 2012 introduces a total of how many audit subsettings? What key length is considered to be minimally strong for encryption algorithms? seconds What is the default timeout value for GPOs to process on system startup? MB What is the default quota size of the Conflict and Deleted folder? and 1813 Which ports do Microsoft RADIUS servers use officially? To use WMI filters, you must have one domain controller running which version of Windows Server or higher? AND 2008 R2 AND 2012 GPP can be configured on domain controllers running which version of Windows Server? Select all that apply What is the default port number for WSUS synchronization? 20. the access server 21. an Accounting- Response to the access server Which system, in a RADIUS infrastructure, handles the switchboard duties of relaying requests to the RADIUS server and back to the client? What is the final step in the authentication, authorization, and accounting scenario between an access client and the RADIUS server? 22. Active Which screening technique prevents a user from saving defined unauthorized files? 23. Active Directory database 24. the Active Directory Recycle Bin The domain controllers are the computers that store and run the. What utility first appeared in Windows Server 2008 R2 that allows you to undelete Active Directory containers and objects? 25. an AD domain In addition to meeting operating system requirements, a DirectAccess client must be a member of what? 26. AD server Which of the following is an example of an SRV record? 27. additional storage space required 28. the ADM format for newer operating systems What is the primary disadvantage of DFS Replication? What is an ADMX file? 29. Administrators What group must you be a member of to enable SMTP? 30. ADSI Edit Which tool can you use to add SPNs to an account? 31. All Computers By default, to which computer group are computers assigned in WSUS? 32. Allow Read AND Allow Apply 33. Allow Read AND Allow Apply 34. another WSUS server on your network A user must have which two existing permissions for new permissions to be applied to their accounts for GPO delegation? For users to receive GPO settings, they must have which two permissions to the GPO? WSUS can retrieve updates directly from Microsoft or from what other source? 35. answer files What type of XML file do you need to create and add information to when performing an unattended operating system installation via WDS?

2 36. Anti-virus/antimalware servers AND Software update servers Identify two remediation server types. 37. Apply Group By default, which GPO permissions are all authenticated users given? 38. apply the template to all derived file screens 39. Assign the PSOs to a global security group and add users to the group. When you change a file template and save the changes, you have the option to do which one of the following? How should you assign Password Settings objects (PSOs) to users? 40. at least two How many global catalogs are recommended for every organization? 41. attribute EFS encryption is what type of feature that can be enabled or disabled at will, similar in effect to read-only, compression, or hidden? 42. Audit policies might cause conflicts or erratic behavior. Why should you avoid using basic audit policy settings and advanced audit policy settings together? 43. audit.csv When resetting audit settings back to basic mode, what file must you remove as part of the process? 44. AuditPol.exe Which command do you use to manage auditing at the command prompt? 45. authorization What process determines what a user is permitted to do on a computer or on a network? 46. automated networkbased installations based on network-based boot and installation media 47. automatic password management AND simplified SPN management Windows Deployment Services (WDS) is a software platform and technology that allows you to perform which function? Name two benefits to using Managed Service Accounts (MSAs). 48. balanced Round-robin DNS is a term that refers to what kind of distribution mechanism for DNS responses to queries? 49. Be sure that you have a good backup. What critical step you should perform before applying patches or updates? 50. because administrator accounts carry more security sensitivity than users do Why should administrator passwords change more often than user passwords? 51. bi-directional What kind of connectivity does DirectAccess establish between workstation and server? 52. BIOS Where in a system do you configure PXE? 53. blah.com Which of the following is an example of a secondlevel domain? 54. boot.wim What is the name of the Windows Server 2012 installation DVD boot image file? 55. by cryptographic checksum How is data verified when transferred through the Internet? 56. by precedence If a site, domain, or OU has multiple GPOs, how are the group policies processed? 57. C:\StorageReports\Scheduled By default, where are storage reports saved? 58. C:\Windows\PolicyDefinitions Where is the default location for ADMX files? 59. canonical name or CNAME What is another designation for an Alias? 60. centralized management What is the primary advantage of using Group Policies in a domain environment? 61. certificate What type of NPS authentication is recommended over password authentication? 62. a certificate authority Where do you get certificates for authentication purposes? 63. Change share permissions. AND Disable one of the connections. What can you do to change bidirectional replication into unidirectional? (Choose two.) 64. cipher.exe If you're a command-line user, what command will encrypt files and folders?

3 65. Client May Request an IP Address AND Server Must Supply an IP Address 66. The client receives an access denied error. 67. Client-side and Server-side targeting 68. a CNAME record 69. computer and user credentials 70. The computer establishes a secure link to the domain controller. 71. The computer is isolated. 72. computer name AND CPU speed 73. a computer's overall health 74. the computers are running Windows Update Which two of the following are Routing and Remote Access IP settings? What happens if a client submits a service ticket request for an SPN that does not exist in the identity store? What two ways can you assign computers to groups in WSUS? If you have a server named server1.blah.com, want to use it as your web server, and have requests point to what kind of DNS record would you create? How do the DirectAccess server and DirectAccess client authenticate each other? What is the first step in the GPO processing order? What happens to a computer that isn't running Windows Firewall? Which of the following are possible targets for individual preferences? Select all that apply. Network Access Protection (NAP) is Microsoft's software for controlling network access of computers based on what? You should restrict access only for clients that don't have all available security updates installed if what situation exists? 75. constraints When the Remote Access server finds an NPS network policy with conditions that match the incoming connection attempt, the server checks any that have been configured for the policy. 76. Convert it to an MSI file Windows Installer cannot install.exe files. To distribute a software package that installs with an.exe file, what must you do to it? 77. Create and distribute an executable file that contains all the settings. What is the most efficient way to deploy VPN (virtual private network) configurations to hundreds of users? 78. decryption An encrypted file can be converted back to its original format by a process known as what? 79. Default Domain Policy 80. delete resource records Which feature affects all users in the domain, including domain controllers? You can use the dnscmd command to create zones. What other tasks can you perform with it? 81. denies If a remote connection attempt does not match any configured constraints, what does the Remote Access server do to the connection? 82. determines the results of network location detection and the IPv6 addresses of the intranet DNS servers What does the netsh namespace show effectivepolicy command do? 83. DHCP The initial configuration of WDS includes setup of what other server? 84. The DirectAccess server must be part of an Active Directory domain. What is the most basic requirement for a DirectAccess implementation? 85. Disallow Apply If you don't want a GPO to apply, which group policy permission do you apply to a user or group? 86. Distributed and Central You can configure Windows Server Update Service (WSUS) in one of two modes: Autonomous or Replica. Autonomous provides one type of management and Replica provides another. What are the two management types? 87. DNS resolver What is another term for DNS client? 88. Domain Administrator privileges AND the editor runs from the domain controller 89. domain administrators What are the two restrictions for adding SPNs to an account? By default, who has read/write capability to the Default Domain Policy?

4 90. domain administrators 91. domain local groups, global groups, and universal groups Which domain users are automatically granted permissions to perform Group Policy Management tasks? What are the three types of groups in a domain? 92. DSRM To perform an authoritative restore, into what mode must you reboot the domain controller? 93. during normal usage 94. dynamic driver provisioning 95. editing local security policies 96. Enable the Reliability Monitor. To examine performance correctly, you must establish a performance baseline. When do you perform this task? Which feature of Windows Server allows you to add driver packages to WDS and then deploy them? What is the secpol.msc utility used for? What do you need to do if you run the Reliability Monitor but it is blank? 97. encapsulation What term is defined as private data placed in a packet with a header containing routing information that allows the data to traverse a transit network, such as the Internet? 98. encrypted After a file has been encrypted, it is stored in what format? 99. the entire folder and its subtree Placing a quota limit on a folder applies that limit to what part of the folder? 100. event receiving What function does a computer perform when it's issued the command wecutil qc? 101. event subscription Microsoft's new Event Viewer allows you to collect events from remote computers and store them locally. By what name is this collection of events known? 102. every 12 hours By default, how often does Active Directory "garbage collection" occur? 103. Execute ipconfig /registerdns. How can you force a system to update its DNS record? 104. F6 For GPP editing states, which key do you use to toggle Enable Current? 105. fault tolerance What is one of the primary advantages to using Active Directory to store DNS information? 106. file screen exception Some exemptions might be required for certain groups to store otherwise restricted file types. What type of exemption can you set up on folders? 107. File Screening What technology did Microsoft develop to combat the storage of storage-using and potentially illegal files on corporate servers? 108. folder You can encrypt individual files, but Microsoft recommends encrypting at what level? 109. for enhanced security 110. for light traffic on small networks 111. forward lookup zone Why would you set Verify Caller ID on a remote dial-up connection for a user? When is it appropriate to use Windows Server 2012 as a router between two networks? Which type of DNS zone resolves host names to IP addresses? 112. full mesh By default, replication groups use what type of topology to replicate to all members of the group? 113. Fully Qualified Domain Name 114. Global Object Access Auditing 115. GPP Client-Side Extensions 116. group membership What does the acronym FQDN stand for? Which auditing feature allows you to define computer-wide system access control lists for the file system or the registry? To support GPPs on older Windows versions (Server and Workstation), you have to install what component from Microsoft? Which variable can be set to authorize or deny a remote connection? 117. group MSAs By default, which service accounts will the Windows PowerShell cmdlets manage? 118. Group Policy Editor 119. Group Policy Management Editor 120. hierarchical distributed 121. High levels of auditing can affect system performance history AND length AND complexity AND age Which utility do you use to access advanced audit policy settings? Which utility do you use to create GPO preferences? What type of structure does DNS have? Why is choosing what to audit, instead of auditing everything that a user does, a good idea? What are examples of password policies? Select all that apply.

5 123. host A specific, individual computer or other network device in a domain is known as what? 124. how IP addresses are assigned 125. how many days a user must wait before a password reset What is the last setting in the Routing and Remote Access IP settings? What does the minimum password age setting control? 126. hub/spoke Which replication topology is more efficient than the default replication topology and allows you to set bandwidth, timing, and directionality to your configuration? 127. if they've become corrupted AND if someone deleted one of the policies 128. if your users have laptop computers and work from home or office Why would you ever want or need to reset the domain policy and the domain controller policy to the default settings? Select all that apply. When would you want to use a split tunnel for users? 129. IKEv2 Which VPN protocol provides constant connectivity? 130. in a remote site Where are you most likely to see a Read-Only Domain Controller (RODC)? 131. in individual GPOs Unlike ADM files, ADMX files are not stored where? 132. in Security logs in Event Viewer 133. in the SYSVOL directory Where can you view audit events? Where is the Central Store located? 134. inheritance The downward flow of group policies is known as what feature of GPOs? 135. Install Active Directory Domain Services (AD DS). AND Execute dcpromo from Server Manager. What two things must you do to a Windows Server to convert it to a domain controller? 136. Internet DirectAccess is for clients connected to which network? 137. Internet Explorer proxy settings If Windows Update fails to retrieve updates, what should you check first? 138. Intra-Site Automatic Tunnel Addressing Protocol What does the acronym ISATAP stand for? 139. IP addresses The Domain Name System (DNS) works much like a phone book to associate URLs (names) with what kinds of numbers? 140. IP-HTTPS If the client cannot reach the DirectAccess server using 6to4 or Teredo tunneling, the client tries to connect using what protocol? 141. ipconfig /all Which command do you use to verify local DNS settings? 142. IPv6 DHCP enforcement is not available for what kind of clients? 143. isolation When you fully engage NAP for remediation enforcement, what mode do you place the policy in? 144. It exports/imports Active Directory information It is a tested, cumulative set of hotfixes, security updates, critical updates, and updates, as well as additional fixes for problems found internally since the release of the product It limits the number of gigabytes allocated to a volume or folder It means that passwords never expire, which is a major security problem. AND It means that you've disabled password aging It places you into nslookup's interactive mode. What function does the CSVDE tool perform? What is the definition of a service pack? What effect does using quotas in File Server Resource Manager have? Why is a setting of 0 for maximum password age not a good idea? Check all that apply. What does issuing the nslookup command with no parameters do on your system?

6 149. It presents the Windows Welcome Wizard on the next boot It removes a system's name and SID It replicates deleted, changed, and corrupted files It speeds DNS queries by building a DNS request cache It's used to boot to a WDS Server to install a preinstallation environment. When using sysprep on the master computer, why do you include the /oobe parameter? What function does the System Preparation Utility (Sysprep.exe) perform on a system? DFS Replication does not replace the need for backups because of what feature of replication? What is the primary advantage of a caching-only DNS server? What role does preboot execution environment (PXE) play in WDS? 154. item-level targeting Which term describes changing the scope of individual preference items so that the preference items apply only to selected users or computers? 155. its distinguished name 156. Keyword Filters AND Requirements Filters To perform an authoritative restore of an object or subtree, what bit of information do you need to know about the object? Which of the following are legitimate Administrative Template Property Filters? Select all that apply last-writer wins What type of resolution model does DFS Replication use to resolve simultaneous-write conflicts? 158. the length of time a record remains in DNS cache 159. Local group policy, Site, Domain, OU What does Time to Live (TTL) mean in DNS parlance? In which order are Group Policy objects (GPOs) processed? 160. locally Where is the default connection policy set to process all authentication requests? 161. locally connected computers Which computers are not affected by VPN enforcement? 162. log viewer The Event Viewer is essentially what kind of tool? 163. logon AND object searches AND universal group membership The global catalog stores a partial copy of all objects in the forest. What are the reasons for keeping that partial copy? Select all that apply Logon/Logoff What type of audit event notifies you that an account failed to log on? 165. loopback What kind of group policies should you enable for student computers? 166. low-level database corruption 167. maps a host name to a single IPv6 address In interactive mode, what aspect of AD can you check with the ntdsutil integrity command? If an A record maps a host name to an IP address, what does an AAAA record do? 168. metadata cleanup Which of the following ntdsutil commands cleans up metadata? 169. minimal When creating service accounts, you should follow the rule of what type of rights and permissions? 170. MPPE 128-Bit Which of the following is the strongest type of encryption? 171. MS-CHAPv2 Which authentication protocol allows you to change an expired password during the connection process? 172. multi-master By using the Active Directory's integrated zone, DNS follows what kind of model? 173. the NAP Server Event Viewer 174. NAP-compliant AND NAPnoncompliant 175. necessary resource entries 176. net start wuauserv Where do you look to find out which computers are blocked and which are granted access via NAP? Health policies are in pairs. What are the members of the pair? Select two. A stub zone is a zone copy that contains only what type of records? Which of the following is the proper method of starting the Windows Update service? 177. netsh What command-line utility is used to import and export NPS templates? 178. netsh nap client show state 179. network policies AND connection request policies 180. Network Policy Server 181. The new files become encrypted. To verify a NAP client's configuration, which command would you run? Health policies are connected to what two other policies? What is a RADIUS server known as in Microsoft parlance? What happens if you move unencrypted files into an encrypted folder? 182. nonauthoritative If a single domain controller's AD database becomes corrupt, which type of restore should you perform on it?

7 183. Not Configured AND Enabled AND Disabled Identify all possible states of an Administrative Template the NPS server When an access client contacts a VPN server or wireless access point, a connection request is sent to what system? 185. NPS, NPS Because NAP is provided by, you need to install to install NAP nslookup NT LAN Manager Which one of the following is correct for querying a PTR record? What does the acronym NTLM stand for? 188. ntdsutil Which utility do you use to defragment Active Directory? 189. NTFS and shared folder permissions How do you secure DFS Namespaces? 190. NTLM What is the default authentication protocol for non-domain computers? 191. offline How do you mount a Windows image using Dism.exe so that you can update it? 192. on bootable media Where do you place a discover image to ensure proper deployment? 193. one How many WMI filters can be configured for a GPO? 194. one How many PDC Emulators are required, if needed, in a domain? 195. one Other than the default computer group, how many other groups may a computer be assigned to in WSUS? 196. Operations Master 197. out-of-band patches Which Active Directory object is defined as a specialized domain controller that performs certain tasks so that multimaster domain controllers can operate and synchronize properly? What kind of updates are released on an as-required basis and are not part of the standard release cycle? 198. PAP Which authentication method is weakest (least secure)? 199. pass all SHV checks 200. Password Policy AND Account Lockout Policy AND Kerberos Policy To use the NAP-compliant policy, the client must do what? Account policies contain various subsets. Which of the following are legitimate subsets of account policies? Check all that apply PPTP Of the four VPN tunneling protocols, which has the weakest encryption? 202. priority Which parameter specifies the order of importance of the RADIUS server to the NPS proxy server? 203. Privilege Use Shutting down the system is an example of what kind of audit event? 204. process What term describes an instance of a program being executed? 205. Processing is hidden from the user The PTR record doesn't exist quick glance 208. quota template GPOs are processed on computer startup and after logon. Why is the user never aware of the processing? If you issue the command nslookup and get no response, but then issue nslookup server1 and receive as a response, what do you know is wrong? Task Manager is not a definitive performance tool because it gives you what kind of look at computer performance? When you create quotas, you are recommended to use what built-in feature to assist you? 209. RADIUS The default connection request policy uses NPS as what kind of server? 210. the RADIUS accounting server 211. a RADIUS proxy server 212. RADIUS server Which system is the destination for Accounting-Start messages? What kind of RADIUS server is placed between the RADIUS server and RADIUS clients? To configure RADIUS service load balancing, you must have more than one kind of what system per remote RADIUS server group? 213. read-only What type of Active Directory domain controller is recommended to minimize security risks for remediation servers? 214. recording user's actions 215. a reference to an attribute within another object Auditing is used for what purpose? When you do an authoritative restore process, a back-links file is created. What is a back-links file? 216. referral What term is defined as "an ordered list of servers or targets that a client computer receives from a domain controller or namespace server when the user accesses a namespace root or a DFS folder with targets"?

8 217. Registry Which Windows extension allows you to copy registry settings and apply them to other computers? create, replace, or delete registry settings? 218. Registry AND Shortcuts AND Folders Windows Settings has multiple preference extensions. Identify all that apply the Registry Wizard Which component allows you to create multiple Registry preference items based on registry settings that you select? 220. Remote Access Management Console 221. remote differential compression (RDC) 222. remote differential compression (RDC) 223. Removable Storage Access What utility do you use to configure DirectAccess? What compression algorithm does Microsoft use to limit the amount of bandwidth used in DFS Replication? If you want to save on CPU and disk I/O but consume more network bandwidth for replication, which DFS feature can you disable? By using what type of policy can you track, limit, or deny a user's ability to use removable storage devices such as USB drives in Windows Server 2012? 224. Replace AND Delete When working with Network Drive Mapping Preferences, which preference behaviors delete drive mappings? Select all that apply a repository for Administrative Templates 226. Reset the user's password Restartable Active Directory Domain Services 228. reverse lookup zones What is the Central Store? After you undelete a user account with the LDP utility, what action do you need to perform? Windows Server 2012 introduces a new time-saving feature when performing tasks such as AD defragmentation. What is that feature? Before creating PTR records, what DNS objects must you create? 229. role What type of service is the Windows File Server Resource Manager? 230. safe What's the status of your data if someone has your public key? 231. sales.microsoft.com Which one of the following is an example of an FQDN? 232. Save useful event filters as custom views that can be reused. Which of the following tasks does the Event Viewer MMC snap-in allow you to perform? 233. the SCCM agent To get the full capability of SCCM, which component must you install on each system on your network? 234. schema When you add attributes to an Active Directory object, what part of the domain database are you actually changing? 235. seamless and always on What kind of connectivity does DirectAccess provide between client computers and network resources? 236. secret key Kerberos security and authentication are based on what type of technology? 237. a secure network authentication protocol What type of protocol is Kerberos? 238. security Why primarily are account lockout policies put into place? 239. Security Center AND NAP Agent 240. security group filter AND WMI filter 241. seize schema master AND seize PDC 242. Select the Stop processing items option on the Common tab Send an , start a program, and display a message sending a password to the server 245. Server Settings Determine IP Address Assignment Which two components must a NAP client have enabled in order to use NAP? Which two filters can you use to control who or what receives a group policy? Which of the following commands issued at the fsmo maintenance prompt would successfully seize the role of an Operations Master Holder? Select all that apply. How do you stop processing a preference if an error occurs? What types of tasks can you add to events? NTLM uses a challenge-response mechanism for authentication without doing what? Which Routing and Remote Access IP setting is the default setting? 246. servers On what type of computer is BitLocker not commonly used?

9 247. service What type of account is an account under which an operating system, process, or service runs? 248. service class, host name, and port number 249. services and processes Which three components make up a service principal name (SPN)? Resource Monitor is a powerful tool for understanding how your system resources are used by what two system consumers? 250. setspn Identify another utility that you can use to add SPNs to an account Shared Secrets AND Health Policies AND RADIUS Clients 252. Shortcut AND Drive Maps 253. shows the NRPT rules as configured on the group policy 254. Simple Mail Transfer Protocol Identify the correct NPS templates. Select all that apply. If you need to provide users access to a common network location, which GPP would you use? Select all that apply. What does the netsh namespace show policy command do? What does the acronym SMTP stand for? 255. small Windows Updates, especially the Automatic Updates feature of Windows Updates, are for what kind of environments? 256. so that you can focus on important audit items What is the purpose of implementing new audit subsettings? 257. SOA record Which DNS record contains the serial number for the zone? 258. speed and load between sites and the number of clients The number of WSUS servers you need is determined by the number of sites you have and what two other factors? 259. Stability Index The Reliability Monitor provides a range of numbers to help you evaluate the reliability of a computer. What is the name of this range of numbers? 260. staging folder What type of special cache folder does each replication folder use to hold files ready to be replicated? 261. Start with a sentence and then add numbers and special characters. What is an easy method of creating a strong password? 262. Storage Reports What FSRM feature can you use to show the state of file server volumes, quotas, and disallowed files? 263. symmetric Single-key encryption is also known as what kind of encryption? 264. sysprep What utility must you run on a cloned system to ensure that the clone receives its own SID? 265. System Image Manager (SIM) 266. System Services AND Registry Permissions AND File System Permissions What Microsoft tool do you use to create and manage Windows setup answer files? The Security template allows you to configure which of the following settings? Select all that apply targets What are DFS Namespace shared folders referred to in relation to the virtual folders? 268. templates What feature can you use to simplify the management of file screens? 269. templates Using what feature can streamline the creation and setup of RADIUS servers? 270. Test the updates on your own systems before approving for rollout that all User Rights Assignments will be replaced 272. that you might have a bottleneck 273. They allow you to break up larger domains into smaller, more manageable ones They deploy customized software installation files 275. They no longer supply acceptable bandwidth. WSUS allows you to automatically approve every update, but you shouldn't necessarily do that. What should you do before approving updates to be installed? When you're about to reset domain policy and domain controllers policy back to default with the dcgpofix.exe command, what final warning are you given before you accept the change? What can Task Manager tell you about performance? What is one advantage of subdomains? What are MST files used for? Why are phone lines and ISDN not used today for remote access services (RAS)?

10 276. They're encrypted with the parent folder through the use of RIP 278. To allow you to archive unused files 279. to analyze the cumulative effect of GPOs AND for GPO troubleshooting 280. to grant access to a user 281. to notify users that they have reached the quota limit 282. to provide user information in case of a compliance failure 283. to store passwords in a non-readable format 284. to verify a user's identity 285. Transport Server and Deployment Server 286. Trusted Platform Module What happens to files and subfolders within an EFS encrypted folder? How are routing tables created dynamically? You can generate several different reports from FSRM. One of them gives you a list of Least Recently Accessed Files. What would be the purpose of that report? What is the primary purpose of running the Group Policy Results Wizard? Check all that apply. Authorization is used for what purpose? What is the purpose of setting soft quotas? Why do you need a web server as part of your NAP remediation infrastructure? What is one purpose of using hash function encryption? Authentication is used for what purpose? Which two role services does the WDS Role include? What built-in computer hardware feature makes BitLocker Drive Encryption far more secure than other forms of folder or file-based encryption? 287. two Public-key cryptography uses how many keys? 288. two consecutive public IP addresses Windows Server 2012 varies from the Windows Server 2008 R2 implementation in that it does not require which one of the following? 289. Two minutes When you set a service to start automatically with delayed start, how long is the delay? 290. two network interface cards What special hardware configuration should a RAS server have? 291. the type of service and the user it's delivered to 292. Uninstall Active Directory Domain Services a unique identifier for a snapshot What information does the Accounting-Start message contain? What is the proper procedure for removing a domain controller from Active Directory? What is a GUID? 294. unreadable Encryption is the process of converting data into what kind of format? 295. Use separate accounts for both services Usernames and passwords are sent in plain text using Active Directory GPOs AND using the Security Configuration and Analysis snap-in 298. using strong passwords AND granting the least rights possible If you install SQL Server and a third-party backup service on the same system, what rule should you follow when creating service accounts? Why is password-based authentication not recommended? Which two of the following methods can you use to deploy security templates? When creating accounts for operating systems, processes, and services, you should always configure them with what two things in mind? 299. VPN traffic is encrypted. Why use a VPN for client-toserver connections over the Internet? 300. web What type of server is the network location server (NLS)? 301. when the policy is processed 302. when the source NPS database has a higher version number than the version number of the destination NPS database 303. where the namespaces are stored 304. who is authorized to connect AND the connection circumstances for connectivity At what point are WMI filters evaluated? When should you not use the command-line method of exporting and importing the NPS configuration? What is the primary difference between domain-based namespace and stand-alone namespace? Network policies determine what two important connectivity constraints?

11 305. who, when, and how An NPS policy is a set of permissions or restrictions that determine what three aspects of network connectivity? 306. Windows 7 AND Windows Windows 7/Windows Server 2008 R2 Which of the following operating systems can have its security settings managed by using security templates? Select all that apply. DirectAccess was introduced with which workstation/server pair? 308. Windows 8 Windows PE 4.0 is based on which operating system? 309. Windows Assessment and Deployment Kit (ADK) 310. Windows Firewall applet AND Documents folder AND Microsoft Excel AND Printer To convert a discover image to a bootable ISO image, what nonincluded component do you need to download and install? Which items can you configure shortcuts to in performing GPP deployments? Select all that apply Windows Installer What is the name of the software component used for installation, maintenance, and removal of software on Windows? 312. Windows Server 2003 Which version of Windows Server introduced incremental universal group membership replication? 313. Windows Server 2008 Which one of the following operating systems may not act as a DirectAccess client? 314. Windows Server 2012 Beginning with which server version can you safely deploy domain controllers in a virtual machine? 315. writable domain controller Which type of system must you connect to and use to make changes to Active Directory? 316. XML What language are ADMX files based on? 317. XML To which type of file do you export an NPS configuration? 318. You can't ping that interface You have a single domain. What is the result of enabling security on the RRAS interface in your RAS server? You do not place the infrastructure master on a global catalog server unless what situation exists? 320. You have to enable the AD Recycle Bin. AND You have to set the AD forest to Windows Server 2008 R2 or higher. Before you can use the Active Directory Recycle Bin, what two actions do you have to perform? 321. the zone serial number A Start of Authority record specifies what kind of information about a zone?