Title: Pre-Test: Knowledge and Concept Assessment
Course: RITA MC - ITNW 1354 > Section: Start Here

Q: Windows Deployment Services (WDS) is a software platform and technology that allows you to perform which function?
- automated network-based installations based on network-based boot and installation media (Explanation: This is the definition of Windows Deployment Services: a software platform and technology that allows you to perform automated network-based installations based on network-based boot and installation media. Correct:)
- automated staging setup for bootable images (Explanation: This is the definition of Windows Deployment Services: a software platform and technology that allows you to perform automated network-based installations based on network-based boot and installation media.)
- downloadable installations based on staged image files (Explanation: This is the definition of Windows Deployment Services: a software platform and technology that allows you to perform automated network-based installations based on network-based boot and installation media.)
- automated configuration and installation via ISO images and an FTP service (Explanation: This is the definition of Windows Deployment Services: a software platform and technology that allows you to perform automated network-based installations based on network-based boot and installation media.)
A: automated network-based installations based on network-based boot and installation media

Q: To convert a discover image to a bootable ISO image, what non-included component do you need to download and install?
- Windows Software Development Kit (SDK) (Explanation: To convert the discover image to a bootable .ISO image, you first must download and install the Windows Assessment and Deployment Kit (ADK) for Windows 8.)
- Windows Application Programming Interface (API) (Explanation: To convert the discover image to a bootable .ISO image, you first must download and install the Windows Assessment and Deployment Kit (ADK) for Windows 8.)
- Windows Assessment and Deployment Kit (ADK) (Correct: Explanation: To convert the discover image to a bootable .ISO image, you first must download and install the Windows Assessment and Deployment Kit (ADK) for Windows 8.)
- Windows Public Key Infrastructure (PKI) (Explanation: To convert the discover image to a bootable .ISO image, you first must download and install the Windows Assessment and Deployment Kit (ADK) for Windows 8.)
A: Windows Assessment and Deployment Kit (ADK)

Q: . What Microsoft tool do you use to create and manage Windows setup answer files?
- System Image Manager (SIM) (Explanation: You can create an answer file with a text editor or XML editor, but Microsoft recommends that you use the graphical System Image Manager (SIM) tool to create and manage unattended Windows setup answer files. You can also use SIM to check answer files. SIM is part of the Windows Assessment and Deployment Kit (ADK).)
- System Preparation Utility (Sysprep.exe) (Explanation: You can create an answer file with a text editor or XML editor, but Microsoft recommends that you use the graphical System Image Manager (SIM) tool to create and manage unattended Windows setup answer files. You can also use SIM to check answer files. SIM is part of the Windows Assessment and Deployment Kit (ADK).)
- Deployment Image Servicing and Managing (Dism.exe) (Explanation: You can create an answer file with a text editor or XML editor, but Microsoft recommends that you use the graphical System Image Manager (SIM) tool to create and manage unattended Windows setup answer files. You can also use SIM to check answer files. SIM is part of the Windows Assessment and Deployment Kit (ADK))
- Windows Preinstallation Environment (Windows PE)
A: System Image Manager (SIM)

Q: What kind of updates are released on an as-required basis and are not part of the standard release cycle?
- Windows updates
- out-of-window patches
- out-of-band patches
- recommended updates
A: out-of-band patches
Feedback: While most updates are released on Patch Tuesday, occasionally out-of-band patches might be released at other times when the patches are deemed critical or time sensitive.

Q: You work for an organization that has a mix of Windows 7, Windows 8, and Windows 8.1 computers. You will be using WSUS to deploy Microsoft updates to these computers. What is the minimum number of WSUS computer groups required for the updates?
- none
- one
- two
- three
A: one
Feedback: If you have a mix of Windows updates, you dont have to put the computers into computer groups based on operating system. Instead, you can deploy the updates as you deploy any other updates. If the update does not apply to the system because the update was specified for one version of Windows yet the system has another version, the patch will not be deployed to the system and the WSUS console will show that the patch was not needed.

Q: When you set a service to start automatically with delayed start, how long is the delay?
- One minute
- Two minutes
- Five minutes
- Delayed until all other services start
A: Two minutes
Feedback: The Automatic (Delayed Start) setting specifies that the service should start automatically after the services marked as automatic have started (which is approximately two minutes).

Q: DFS Replication does not replace the need for backups because of what feature of replication?
- It fails with more than 8 million files per volume.
- It replicates deleted, changed, and corrupted files.
- The frequency of replication is too seldom.
- It has a very small cache in which to store files.
A: It replicates deleted, changed, and corrupted files.
Feedback: DFS Replication is not a replacement for backups. If a file gets deleted, changed, or corrupted on one target server, it will most likely be deleted, changed, or corrupted on the other target servers. Therefore, you still need to use backups to provide data protection and recovery.

Q: What type of service is the Windows File Server Resource Manager?
- quota
- role
- third-party add-on
- extension
A: role
Feedback: Similar to the previous Windows server roles, File Server Resource Manager (FSRM) is installed with Server Manager as a server role.

Q: What is one purpose of using hash function encryption?
- to store passwords in a non-readable format
- to demonstrate one-way encryption techniques
- to provide keyless encryption and decryption algorithms
- to keep track of 128-bit key pairs
A: to store passwords in a non-readable format
Feedback: One purpose of hash function encryption is to encrypt a password stored on disk. Anytime a password is entered and it needs to be verified that it is the correct password, the same hash calculation is performed on the entered password and compared to the hash value of the password stored on disk.

Q: Where can you view audit events?
- in the C:\Temp\Logs folder as text files
- in System logs in Event Viewer
- in Security logs in Event Viewer
- by using audit /logs at the command line
A: in Security logs in Event Viewer
Feedback: To view audit events, open the Security logs in the Event Viewer.

Q: The Domain Name System (DNS) works much like a phone book to associate URLs (names) with what kinds of numbers?
- ID numbers
- World Wide Web numbers
- domain addresses
- IP addresses
A: IP addresses
Feedback: The Domain Name System (DNS) is a naming service used by TCP/IP networks and the Internet. Every time a user accesses a web page, that user must type a URL. Before the client communicates with the web server, the client computer needs to use DNS to retrieve the IP address of the web server, similarly to someone using a phone book to find a phone number.

Q: Before creating PTR records, what DNS objects must you create?
- reverse lookup zones
- CNAME records
- SOA records
- NS records
A: reverse lookup zones
Feedback: If the reverse lookup zone does not exist to store the PTR record, a warning is issued that the associated pointer (PTR) record cannot be created.

Q: What is the result of enabling security on the RRAS interface in your RAS server?
- You can’t connect to the Internet on that interface.
- You can’t ping that interface.
- You can’t provide network address translation (NAT) services to a local-area network.
- You can’t use DHCP.
A: You can’t ping that interface.
Feedback: If you intend instead to use a firewall to protect your RRAS server, do not enable the Enable security on the selected interface by setting up static packet filters option. Also, if you enable this option, by default you cant ping the IP address of the public network adapter because Internet Control Message Protocol (ICMP) packets are blocked by the packet filters.

Q: Which one of the following operating systems may not act as a DirectAccess client?
- Windows 7 Enterprise
- Windows Server 2008
- Windows Server 2008 R2
- Windows 8
A: Windows Server 2008
Feedback: To use DirectAccess, the clients must be Windows 7 Enterprise Edition, Windows 7 Ultimate Edition, Windows 8, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. You cannot deploy DirectAccess for Windows Vista or earlier or for Windows Server 2008 or earlier.

Q: Which system, in a RADIUS infrastructure, handles the switchboard duties of relaying requests to the RADIUS server and back to the client?
- the NPS server
- the access client
- the wireless access point
- the access server
A: the access server
Feedback: When the connection attempt is authorized with both the dial-in properties of the user account and network policies, the NPS server sends an Access-Accept message to the access server. If the connection attempt is not authenticated or authorized, the NPS server sends an Access-Reject message to the access server. The access server completes the connection process with the access client and sends an Accounting-Request message to the NPS server, where the message is logged.

Q: An NPS policy is a set of permissions or restrictions that determine what three aspects of network connectivity?
- who, what, and where
- who, when, and how
- who, when, and where
- who, how, and how long
A: who, when, and how
Feedback: A Network Policy Server (NPS) policy is a set of permissions or restrictions that are used by remote access authenticating servers that determine who, when, and how a client can connect to a network.

Q: Because NAP is provided by _________, you need to install _________ to install NAP.
- NPS, NPS
- DNS, NPS
- DHCP, NPS
- AD, NPS
A: NPS, NPS
Feedback: NAP is provided by NPS. Therefore, to install NAP, you must install NPS.

Q: What is the default maximum allowable time lapse between domain controllers and client systems for Kerberos to work correctly?
- 1 minute
- 5 minutes
- 15 minutes
- 45 minutes
A: 5 minutes
Feedback: For all of this to work and to ensure security, the domain controllers and clients must have the same time. Windows operating systems include the Time Service tool (W32Time service). Kerberos authentication will work if the time interval between the relevant computers is within the maximum enabled time parameters. The default is five minutes.

Q: Which Active Directory object is defined as a specialized domain controller that performs certain tasks so that multi-master domain controllers can operate and synchronize properly?
- Schema Master
- Forest
- RODC
- Operations Master
A: Operations Master
Feedback: Operations Masters are specialized domain controllers that perform certain tasks so that multi-master domain controllers can operate and synchronize properly.

Q: What utility first appeared in Windows Server 2008 R2 that allows you to undelete Active Directory containers and objects?
- the Active Directory Lost and Found folder
- the Active Directory Recycle Bin
- the Active Directory Undelete utility
- Active Directory Snapshots
A: the Active Directory Recycle Bin
Feedback: Starting with Windows Server 2008 R2, Windows has offered the Active Directory Recycle Bin. Similar to the Recycle Bin found in Windows that is used to undelete deleted files, the Active Directory Recycle Bin can be used to undelete deleted Active Directory containers and objects.

Q: How should you assign Password Settings objects (PSOs) to users?
- Assign the PSOs directly to individual users.
- Assign the PSOs to a new group and add the users to the new group.
- Assign the PSOs to a global security group and add users to the group.
- Assign the PSOs to various Active Directory groups as needed.
A: Assign the PSOs to a global security group and add users to the group.
Feedback: To assign a PSO to a user, it is best to assign the PSO to a global security group and then add the user to the global security group.

Q: What is the first step in the GPO processing order?
- The user initiates interactive logon.
- The computer obtains a list of GPOs from the domain controller.
- The computer establishes a secure link to the domain controller.
- The GPOs are applied to the computer and to the user.
A: The computer establishes a secure link to the domain controller.
Feedback: Group policies are processed in the following way: When a computer first starts up, it establishes a secure link between the computer and a domain controller.

Q: What is the name of the software component used for installation, maintenance, and removal of software on Windows?
- Control Panel
- Add/Remove Programs applet
- Windows Installer
- Application Installer
A: Windows Installer
Feedback: The Windows Installer is a software component used for the installation, maintenance, and removal of software on Windows.

Q: Which domain users are automatically granted permissions to perform Group Policy Management tasks?
- local administrators
- power users
- domain administrators
- domain users
A: domain administrators
Feedback: In Active Directory, domain administrators are automatically granted permissions for performing Group Policy Management tasks.

Q: Which term describes changing the scope of individual preference items so that the preference items apply only to selected users or computers?
- individual targeting
- user-specific targeting
- item-level targeting
- focused targeting
A: item-level targeting
Feedback: Item-level targeting is used to change the scope of individual preference items so that the preference items apply only to selected users or computers.