Title: Quiz 2
Course: CTS 2346 Windows Server 2012 > Section: Module 2

Q: Explain the primary difference in full mesh topology and hub/spoke topology.

Q: Briefly explain the relationship between DFS Replication and the DFS Namespace.

Q: Which namespace optimization polling option should you select if you have more than 16 namespace servers?

Q: What other server role must you install to work with DFS Namespaces?

Q: List the three settings you can change when configuring DFS Replication.

Q: Why is it so important that you know how much traffic DFS Replication requires?

Q: If you want to save on CPU and disk I/O but consume more network bandwidth for replication, which DFS feature can you disable?
- remote differential compression (RDC)
- collective compression technology (CCT)
- shortest path replication (SPR)
- server-to-server replication compression (S2SRC)
A: remote differential compression (RDC)
If right: If you disable RDC, you can conserve processor and disk input/output (I/O). Of course, you will consume much more bandwidth.
If wrong: If you disable RDC, you can conserve processor and disk input/output (I/O). Of course, you will consume much more bandwidth.

Q: What can you do to change bidirectional replication into unidirectional? (Choose two.)
- Change share permissions.
- Remove the trust relationships between systems.
- Remove member servers from the domain.
- Disable one of the connections.
A: Change share permissions.; Disable one of the connections.
If right: By default, DFS replication between two members is bidirectional. Bidirectional connections occur in both directions and include two one-way connections. If you want only a one-way connection, you can disable one of the connections or use share permissions to prevent the replication process from updating files on certain member servers.
If wrong: By default, DFS replication between two members is bidirectional. Bidirectional connections occur in both directions and include two one-way connections. If you want only a one-way connection, you can disable one of the connections or use share permissions to prevent the replication process from updating files on certain member servers.

Q: FSRM includes pre-built file groups for file screens. What two attributes make up a file group?

Q: From a security standpoint, which method of screening is safer—active or passive—and why?

Q: If you were asked to set up a shared file area for users that prevented them from saving video files or images of any kind, what would you set up on that shared folder?
- Active file screen with included and excluded file groups
- hard quota for each user and passive file screening
- standard file share with e-mail notification
- Passive file screen and a soft quota
A: Active file screen with included and excluded file groups
If right: A file group defines a namespace for a file screen, file screen exception, or Files by File Group storage report. It consists of a set of file name patterns grouped by files to include and files to exclude. FSRM already includes prebuilt file groups. Active screening prevents users from saving defined unauthorized files.
If wrong: A file group defines a namespace for a file screen, file screen exception, or Files by File Group storage report. It consists of a set of file name patterns grouped by files to include and files to exclude. FSRM already includes prebuilt file groups. Active screening prevents users from saving defined unauthorized files.

Q: What is the purpose of setting up e-mail notifications for users who violate storage quotas?
- so that administrators can proactively assist users in resolving the problem
- to automate tracking of quota violations
- To keep a record of quota violations for future reference
- to ensure that users know when they’re using too much storage
A: so that administrators can proactively assist users in resolving the problem
If right: Not all users violate quotas haphazardly; some have legitimate business reasons for requiring more than the standard storage allotment. As a result, you need to be aware of any legitimate business use cases and respond quickly to those needs.
If wrong: Not all users violate quotas haphazardly; some have legitimate business reasons for requiring more than the standard storage allotment. As a result, you need to be aware of any legitimate business use cases and respond quickly to those needs.

Q: FSRM is a suite of tools that enables you to control and manage data stored on a file server. List the three primary management tools that you get with FSRM.

Q: Explain the difference between hard quota and soft quota.

Q: If you need to make a change to a quota template, what can you do with that template once you’ve changed it?

Q: Other than prevent users from wasting valuable storage space, why else would you apply a file screen to certain types of files?

Q: BitLocker has multiple operational modes for OS drives that define the steps involved in the boot process. Match the TPM + startup PIN + startup key BitLocker mode with its correct description.
- The system stores the BitLocker volume encryption key on the TPM chip, but you must supply a personal identification number (PIN) and insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.
- The system stores the BitLocker volume encryption key on the TPM chip and accesses it automatically when the chip has determined that the boot environment is unmodified. This unlocks the protected volume and the computer continues to boot. No administrative interaction is required during the system boot sequence.
- The system stores the BitLocker volume encryption key on the TPM chip, but you must supply a PIN before the system can unlock the BitLocker volume and complete the system boot sequence.
- The system stores the BitLocker volume encryption key on the TPM chip, but you must insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.
A: The system stores the BitLocker volume encryption key on the TPM chip, but you must supply a personal identification number (PIN) and insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.
If right: With TPM + startup PIN + startup key, the system stores the BitLocker volume encryption key on the TPM chip, but you must supply a personal identification number (PIN) and insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.
If wrong: With TPM + startup PIN + startup key, the system stores the BitLocker volume encryption key on the TPM chip, but you must supply a personal identification number (PIN) and insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.

Q: BitLocker has multiple operational modes for OS drives that define the steps involved in the boot process. Match the TPM only BitLocker mode with its correct description.
- The system stores the BitLocker volume encryption key on the TPM chip, but you must supply a personal identification number (PIN) and insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.
- The system stores the BitLocker volume encryption key on the TPM chip and accesses it automatically when the chip has determined that the boot environment is unmodified. This unlocks the protected volume and the computer continues to boot. No administrative interaction is required during the system boot sequence.
- The system stores the BitLocker volume encryption key on the TPM chip, but you must supply a PIN before the system can unlock the BitLocker volume and complete the system boot sequence.
- The system stores the BitLocker volume encryption key on the TPM chip, but you must insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.
A: The system stores the BitLocker volume encryption key on the TPM chip and accesses it automatically when the chip has determined that the boot environment is unmodified. This unlocks the protected volume and the computer continues to boot. No administrative interaction is required during the system boot sequence.
If right: With TPM only, the system stores the BitLocker volume encryption key on the TPM chip and accesses it automatically when the chip has determined that the boot environment is unmodified. This unlocks the protected volume and the computer continues to boot. No administrative interaction is required during the system boot sequence.
If wrong: With TPM only, the system stores the BitLocker volume encryption key on the TPM chip and accesses it automatically when the chip has determined that the boot environment is unmodified. This unlocks the protected volume and the computer continues to boot. No administrative interaction is required during the system boot sequence.

Q: BitLocker has multiple operational modes for OS drives that define the steps involved in the boot process. Match the TPM + startup key BitLocker mode with its correct description.
- The system stores the BitLocker volume encryption key on the TPM chip, but you must supply a personal identification number (PIN) and insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.
- The system stores the BitLocker volume encryption key on the TPM chip and accesses it automatically when the chip has determined that the boot environment is unmodified. This unlocks the protected volume and the computer continues to boot. No administrative interaction is required during the system boot sequence.
- The system stores the BitLocker volume encryption key on the TPM chip, but you must supply a PIN before the system can unlock the BitLocker volume and complete the system boot sequence.
- The system stores the BitLocker volume encryption key on the TPM chip, but you must insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.
A: The system stores the BitLocker volume encryption key on the TPM chip, but you must insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.
If right: With TPM + startup key, the system stores the BitLocker volume encryption key on the TPM chip, but you must insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.
If wrong: With TPM + startup key, the system stores the BitLocker volume encryption key on the TPM chip, but you must insert a USB flash drive containing a startup key before the system can unlock the BitLocker volume and complete the system boot sequence.

Q: What is one purpose of using hash function encryption?
- to store passwords in a non-readable format
- to demonstrate one-way encryption techniques
- to provide keyless encryption and decryption algorithms
- to keep track of 128-bit key pairs
A: to store passwords in a non-readable format
If right: One purpose of hash function encryption is to encrypt a password stored on disk. Anytime a password is entered and it needs to be verified that it is the correct password, the same hash calculation is performed on the entered password and compared to the hash value of the password stored on disk.
If wrong: One purpose of hash function encryption is to encrypt a password stored on disk. Anytime a password is entered and it needs to be verified that it is the correct password, the same hash calculation is performed on the entered password and compared to the hash value of the password stored on disk.

Q: On what type of computer is BitLocker not commonly used?
- laptops
- desktops
- netbooks
- servers
A: servers
If right: BitLocker is not commonly used on servers, but may become more common in the future as BitLocker has been improved to work on failover cluster volumes and SANs. Instead, most organizations use physical security for servers (such as locked server room and/or server rack that can be accessed only by a handful of people) to prevent the computer and drives from being stolen.
If wrong: BitLocker is not commonly used on servers, but may become more common in the future as BitLocker has been improved to work on failover cluster volumes and SANs. Instead, most organizations use physical security for servers (such as locked server room and/or server rack that can be accessed only by a handful of people) to prevent the computer and drives from being stolen.

Q: What’s the status of your data if someone has your public key?
- compromised
- broken
- hacked
- safe
A: safe
If right: If the public key falls into someone else’s hands, that person still cannot decrypt the message.
If wrong: If the public key falls into someone else’s hands, that person still cannot decrypt the message.

Q: What built-in computer hardware feature makes BitLocker Drive Encryption far more secure than other forms of folder or file-based encryption?
- Certificates
- hardware-assisted virtualization
- Trusted Platform Module
- BIOS-enabled anti-virus software
A: Trusted Platform Module
If right: Information stored on the Trusted Platform Module (TPM) can be more secure from external software attacks and physical theft.
If wrong: Information stored on the Trusted Platform Module (TPM) can be more secure from external software attacks and physical theft.

Q: What happens to files and subfolders within an EFS encrypted folder?
- Nothing; they must be encrypted individually.
- They’re encrypted but at a lower encryption level.
- They’re left unencrypted but hidden.
- They’re encrypted with the parent folder.
A: They’re encrypted with the parent folder.
If right: If you encrypt a folder, all files and subfolders created in the encrypted folder are automatically encrypted.
If wrong: If you encrypt a folder, all files and subfolders created in the encrypted folder are automatically encrypted.

Q: How can you recover EFS encrypted files if someone leaves the company and doesn’t give their passwords?